last executing test programs: 16m45.250774624s ago: executing program 3 (id=547): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x204500) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x9, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x1, 0x9, 0xfeedcafe, 0xe7, 0xffffff80, 0x0, 0x4}}) 16m45.225922014s ago: executing program 3 (id=549): userfaultfd(0x801) syz_emit_ethernet(0x9a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000641100fc0000005dc854f20000000000000000ff02000000000000000000000000000100004e2200649078020000000300000003000000ce75710eeeb5f3d682aa44b5baa75d0e6f30e9f78c045a5d3e3dd40000daba0bf8fb104633251188e45d79a220d115a0774e8a0c3e29a4f380cf106865a0edf7bf2a3d00"/154], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r0, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000500)={&(0x7f0000000080), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="02002abd7000fddbdf251b000000050092000000000098002280140000cb0800020001e0ffff07000300ff0000000c000080080004000700000014000080080004000000008008000200000000804400008008000600100000000800010096d2000008000100ff01000008000600ff030000748d8c03c9c249e0bcb80800030080000000080005000c000000080001001000000008000400ae0a00001c000080080002000500000008000600a23f000008000600010000000400cc000400cc00"], 0xc4}}, 0x4008080) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 16m44.686185312s ago: executing program 3 (id=553): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x66, &(0x7f0000000bc0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @dstopts={0x84, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x1]}}]}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000205000100070000008d19e0da1eab44795dee96d502b9dd1c0facca66750302e07ad5035f33ea1709"], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80d0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x100000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) flistxattr(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000180)='net/netfilter\x00') sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000b00000000008000000100000305000100070000020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 16m42.791016271s ago: executing program 3 (id=558): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x58, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0xfa, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ptrace$poke(0x5, r1, &(0x7f0000000040), 0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47d, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f042, 0x2}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 16m42.221961127s ago: executing program 3 (id=561): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x401}]}}}]}, 0x40}}, 0x40004) (fail_nth: 1) 16m41.66933057s ago: executing program 3 (id=565): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[], 0x54}}, 0x80) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000000c0)='wg1\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x240042, 0x1) close(r1) userfaultfd(0x801) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) shmctl$IPC_RMID(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x52, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1}) r4 = fanotify_init(0x1, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c3c387e9fa1dfce2e9b44502fb7de7266646e6f3dc607dd1456d7f6a396605b5210ec69c0a938bb38ddf2f256ed7c35549dcffd38ddc6c39798d1ce62f2c4bbd480632aa00b56c7f40eb76d0e023a51ff7f0000000000006b698551576efb", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fba000010324d770b40102fd"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) 16m41.161168583s ago: executing program 32 (id=565): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[], 0x54}}, 0x80) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000000c0)='wg1\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x240042, 0x1) close(r1) userfaultfd(0x801) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) shmctl$IPC_RMID(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x52, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1}) r4 = fanotify_init(0x1, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c3c387e9fa1dfce2e9b44502fb7de7266646e6f3dc607dd1456d7f6a396605b5210ec69c0a938bb38ddf2f256ed7c35549dcffd38ddc6c39798d1ce62f2c4bbd480632aa00b56c7f40eb76d0e023a51ff7f0000000000006b698551576efb", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000fba000010324d770b40102fd"], 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) 6m19.649991532s ago: executing program 2 (id=2178): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x20, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000005500d509000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000280", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000a000100000000000000001420000100", @ANYRES32, @ANYBLOB="00000000ac1404ae00000000000000000000000086"], 0x58}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000092b01fe800000000000000000"], 0x0) io_setup(0x20fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000001000)=""/156, 0x9c}], 0x5, &(0x7f0000001140)=""/216, 0xd8}, 0xffffffff}, {{&(0x7f0000001240)=@nfc_llcp, 0x80, &(0x7f0000002580)}, 0x2}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/28, 0x1c}, {&(0x7f0000002980)=""/17, 0x11}, {&(0x7f00000029c0)=""/127, 0x7f}], 0x3, &(0x7f0000002a80)=""/117, 0x75}, 0x7}, {{&(0x7f0000002b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b80)=""/152, 0x98}], 0x1, &(0x7f0000002c80)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003d00)=""/243, 0xf3}, {&(0x7f0000003e00)=""/39, 0x27}, {&(0x7f0000003e40)=""/35, 0x23}, {&(0x7f0000003ec0)=""/213, 0xd5}], 0x4, &(0x7f0000004040)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f00000050c0)=""/206, 0xce}, {&(0x7f00000051c0)=""/199, 0xc7}, {&(0x7f00000052c0)=""/201, 0xc9}], 0x3}, 0x41f3}, {{&(0x7f0000005400)=@xdp, 0x80, &(0x7f00000079c0)=[{0x0}, {&(0x7f0000000640)=""/41, 0x29}, {&(0x7f00000064c0)=""/242, 0xf2}, {&(0x7f00000065c0)=""/19, 0x13}, {&(0x7f0000006600)=""/196, 0xc4}, {&(0x7f0000006700)=""/161, 0xa1}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/157, 0x9d}, {&(0x7f0000007980)=""/4, 0x4}], 0x9}, 0x2}, {{&(0x7f0000007a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x80, &(0x7f0000008f80)=[{&(0x7f0000007b00)=""/5, 0x5}, {0x0}, {&(0x7f0000007c40)=""/86, 0x56}, {&(0x7f0000007d40)=""/250, 0xfa}, {&(0x7f0000007e40)=""/207, 0xcf}, {&(0x7f0000007f40)=""/48, 0x30}, {&(0x7f0000007f80)=""/4096, 0x1000}], 0x7}, 0x7}], 0x8, 0x12100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x2c}}, 0x0) 6m18.479187022s ago: executing program 2 (id=2180): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x107ff, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f00000001c0)}, 0x20) 6m16.004170804s ago: executing program 2 (id=2188): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd0911809", 0x78}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f8", 0x2d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e", 0x82}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d490", 0xe0}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m15.195915494s ago: executing program 2 (id=2190): syz_io_uring_setup(0x141e, &(0x7f0000000400)={0x0, 0x7ccd, 0x10000, 0x2, 0x213}, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000380)) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m13.066794554s ago: executing program 2 (id=2198): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0xa, 0x5, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x300, 0x3000003, 0x3, 0x0, 0x100, 0x0}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)=@in6={0xa, 0x4e28, 0x8001, @loopback, 0x5}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="200000000016d3e2408d3ae650000000f3ff00004ef7ffff09000000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000050000003000000001800000180001000000000084000000000000005f009d8cc23bc17f5c77ced712ef837c97470a757d5a60ab6d55eea71a56a05f9f41b06c43361f11f59999897dfae5db9ae64a9201bb9a2563005493792dcd08f2d5b8e4b6ef4c2ed1ab9f32f8e10f5b8ccfd86786d857213ceef34c214c9dba9d4df7036571"], 0x50, 0x805}, 0x20000010) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getrandom(0xfffffffffffffffe, 0x0, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0x3, 0x1, 0x50424752, 0x7, 0xa, [{0x4, 0x6}, {0xb, 0x8980}, {0x793, 0x2ad4}, {0x3, 0x7fffffff}, {0x10001, 0x69ab9b64}, {0x4}, {0xff, 0x5}, {0xb, 0x6}], 0x0, 0x3, 0x8, 0x0, 0x5}}) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6m12.168865748s ago: executing program 2 (id=2201): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m56.560671334s ago: executing program 33 (id=2201): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.782902485s ago: executing program 1 (id=3029): r0 = syz_io_uring_setup(0x141e, &(0x7f0000000400)={0x0, 0x7ccd, 0x10000, 0x2, 0x213}, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000380)) openat$ublk_ctrl(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r0, 0x20, 0xd9db, 0x8, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r2, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 15.663930339s ago: executing program 0 (id=3031): r0 = socket$netlink(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(0x0, 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xff) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5319, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0x80020004, 0x4) listen(r5, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 14.447873884s ago: executing program 0 (id=3033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x192f27f983b7b9cd}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 14.15041289s ago: executing program 6 (id=3034): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x20, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000005500d509000000000000000007000000", @ANYRES32=r3, @ANYBLOB="20000280", @ANYRES32=r1, @ANYBLOB="0000000000000000000000000a000100000000000000001420000100", @ANYRES32, @ANYBLOB="00000000ac1404ae00000000000000000000000086"], 0x58}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000092b01fe8000000000000000000000000000bbfe8000004000e3bc00000000000000aa320004000110000050"], 0x0) io_setup(0x20fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000001000)=""/156, 0x9c}], 0x5, &(0x7f0000001140)=""/216, 0xd8}, 0xffffffff}, {{&(0x7f0000001240)=@nfc_llcp, 0x80, &(0x7f0000002580)}, 0x2}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/28, 0x1c}, {&(0x7f0000002980)=""/17, 0x11}, {&(0x7f00000029c0)=""/127, 0x7f}], 0x3, &(0x7f0000002a80)=""/117, 0x75}, 0x7}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000004040)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f00000053c0)}, 0x41f3}, {{&(0x7f0000005400)=@xdp, 0x80, &(0x7f00000079c0)}, 0x2}], 0x6, 0x12100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x2c}}, 0x0) 14.143668033s ago: executing program 0 (id=3035): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x109040, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r1, 0x3005}, {0xffffffffffffffff, 0x1104}, {r0, 0x9c}, {r1, 0x844a}, {r1}, {r0, 0x200}, {r2, 0xf472}], 0x7, &(0x7f00000002c0)={r3, r4+60000000}, &(0x7f0000000300)={[0x1]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_TDX_FINALIZE_VM(0xffffffffffffffff, 0xc004aeba, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) r12 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) readv(r12, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003bc0)={0x2c, 0x10, 0x21, 0x70bd26, 0x0, {0x3}, [@nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0x116, 0x0, 0x1, [@nested={0x10, 0xd4, 0x0, 0x1, [@nested={0xc, 0x120, 0x0, 0x1, [@typed={0x8, 0x149, 0x0, 0x0, @ipv4=@multicast1}]}]}]}]}]}, 0x2c}}, 0x80) r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_pts(r14, 0x420000) socket$netlink(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r15 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r15, &(0x7f0000019680)=""/102392, 0x18ff8) r16 = socket$alg(0x26, 0x5, 0x0) bind$alg(r16, &(0x7f0000010400)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 13.471359773s ago: executing program 4 (id=3036): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000012a40)={0x0, 0x0, &(0x7f0000012a00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000140a010400000000090000000100000308000340000000090900020073797a3100000000140000001100010000000000000000000e00000a"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RREADDIR(r5, &(0x7f00000002c0)={0x68, 0x29, 0x1, {0x3, [{{0x40, 0x4, 0x4}, 0x5, 0x6, 0x7, './file0'}, {{0x0, 0x2}, 0x860, 0x8, 0x7, './file0'}, {{0x40}, 0x0, 0x5, 0x7, './file0'}]}}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x20560a, 0x400, 0x4000002, 0x15b, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f00000010c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="2800fd80df25070000007f3a21ad80ce2ebf8d884e5d2e9852d9f366535d9d9151b8bd75d5587fe5eeb6f4568debac80c56e4f32875acc9f38d788b30dcbf28228e4b92c4f5cd9c4519135cc0f9cd2c6fa0a010000000000000055f2869c4996a606bdf28e8b2be9c68760e01c260b044681d665906624748770ec463188e3d750817cc13e409252be3af59dd67e4d7ce7405057f139faf7b8fc9d427a134012fbf7ee3a22c560a254f1ff3a7e5c371b12b51919bad3656beb543cf2ab4b92161dcbe520c54a000000000000", @ANYRES32=0x0, @ANYBLOB="008201000210000008001c00", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4080) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x50000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x2, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x3, 0x1f1, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e53, 0x2000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r15 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r15, 0x4058534c, &(0x7f00000000c0)={0x80, 0x9, 0x67fff, 0x40069ce, 0xfffff4f1, 0x4}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) read$FUSE(r5, &(0x7f0000008180)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) 12.75646646s ago: executing program 6 (id=3037): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x5, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x6c, 0x8, @rand_addr=0x64010102, @loopback}}}}}}, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8010, r2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) unshare(0x2c020400) 12.558269288s ago: executing program 1 (id=3038): syz_io_uring_setup(0x141e, &(0x7f0000000400)={0x0, 0x7ccd, 0x10000, 0x2, 0x213}, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000380)) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.476380885s ago: executing program 6 (id=3040): syz_io_uring_setup(0x141e, 0x0, 0x0, &(0x7f00000000c0), 0x0) openat$ublk_ctrl(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904"], 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r1, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)}}, 0x40) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.646824605s ago: executing program 4 (id=3041): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x168, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xde}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x0, 0x7, 0x2}}, @common=@srh={{0x30}, {0x0, 0x4, 0x9f, 0x6, 0x6, 0x1e0c, 0x800}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r1, 0x0, {0x2, 0x1}, 0xfe}, 0x18) readahead(r0, 0x8, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) read$midi(r7, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 9.102733904s ago: executing program 4 (id=3043): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYRESDEC], 0x54}}, 0x80) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000000c0)='wg1\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x240042, 0x1) close(r1) userfaultfd(0x801) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) shmctl$IPC_RMID(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x52, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, 0x0) r4 = fanotify_init(0x1, 0x1000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80c040, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66642c3c387e9fa1dfce2e9b44502fb7de7266646e6f3dc607dd1456d7f6a396605b5210ec69c0a938bb38ddf2f256ed7c35549dcffd38ddc6c39798d1ce62f2c4bbd480632aa00b56c7f40eb76d0e023a51ff7f0000000000006b698551", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="ad", 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) 9.073484569s ago: executing program 1 (id=3044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100ffff000000004000000085"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3ab35133c39e0c28bd0aaac318d2764f0d56f4ac77471383b4d1909daec6ef07469f40e9fd1932fcb1c33d352357c5d3d1f430a4bc110383faaced6cc49cba6888886c279bc45fa79ff8fe4a3b47f165fcb92f63781fa072e2116df0648a4013b6a5cde4f80b262d1e74d12dd7d60abf05a0ca25bd8c33dd5bd9b06a7eebece8c322b78e2f89d62b21fc03f47abb61ca5ff427d7a4619e8ca7", @ANYRES64=0x0], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0x8, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x40480923, 0x200000000005) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x6000, 0x100000b, 0x8012, r1, 0x0) 9.004891362s ago: executing program 5 (id=3045): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "529ff570750d18608008ed8d810cbab6"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (fail_nth: 1) 8.137867581s ago: executing program 5 (id=3046): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x20, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000005500d5090000000000000000070000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="0000000000000000000000000a000100000000000000001420000100", @ANYRES32, @ANYBLOB="00000000ac1404ae00000000000000000000000086dd"], 0x58}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000092b01fe8000000000000000000000000000bbfe8000004000e3bc00000000000000aa320004000110000050"], 0x0) io_setup(0x20fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000001000)=""/156, 0x9c}], 0x5, &(0x7f0000001140)=""/216, 0xd8}, 0xffffffff}, {{&(0x7f0000001240)=@nfc_llcp, 0x80, &(0x7f0000002580)}, 0x2}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/28, 0x1c}, {&(0x7f0000002980)=""/17, 0x11}, {&(0x7f00000029c0)=""/127, 0x7f}], 0x3, &(0x7f0000002a80)=""/117, 0x75}, 0x7}, {{&(0x7f0000002b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b80)=""/152, 0x98}], 0x1, &(0x7f0000002c80)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003d00)=""/243, 0xf3}, {&(0x7f0000003e00)=""/39, 0x27}, {&(0x7f0000003e40)=""/35, 0x23}, {&(0x7f0000003ec0)=""/213, 0xd5}], 0x4, &(0x7f0000004040)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000005400)=@xdp, 0x80, 0x0}, 0x2}], 0x6, 0x12100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x2c}}, 0x0) 7.191968994s ago: executing program 5 (id=3047): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x66, &(0x7f0000000bc0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @dstopts={0x84, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x1]}}]}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000205000100070000008d19e0da1eab44795dee96d502b9dd1c0facca66750302e07ad5035f33ea1709268fc2"], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80d0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x100000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) flistxattr(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000180)='net/netfilter\x00') sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd05000700880000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000b00000000008000000100000305000100070000020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) 7.16140509s ago: executing program 1 (id=3048): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) munmap(&(0x7f0000b9c000/0x4000)=nil, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) munmap(&(0x7f000003d000/0x4000)=nil, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x42) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',version=9p2000,access=client']) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa8040, 0x0) preadv(r8, &(0x7f0000000600)=[{&(0x7f0000000180)=""/32, 0x20}], 0x1, 0x7f, 0x2) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000200)) 6.7583925s ago: executing program 0 (id=3049): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x60c, 0x3}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) read$dsp(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000140), 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) (async) stat(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x40, 0x20) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000001500)=""/87, 0x0, 0xeeee0000}) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) (async) r3 = eventfd2(0x801, 0x80000) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000180)={0x0, r3}) (async) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000440)=""/180, 0x0, 0x6000}) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prlimit64(0x0, 0x8, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) 6.43826386s ago: executing program 4 (id=3050): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x168, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xde}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x0, 0x7, 0x2}}, @common=@srh={{0x30}, {0x0, 0x4, 0x9f, 0x6, 0x6, 0x1e0c, 0x800}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r1, 0x0, {0x2, 0x1}, 0xfe}, 0x18) readahead(r0, 0x8, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) read$midi(r7, 0x0, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4180, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 5.766699551s ago: executing program 6 (id=3051): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000080)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x102b}}, 0x2000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r5 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000012a40)={0x0, 0x0, &(0x7f0000012a00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000140a010400000000090000000100000308000340000000090900020073797a3100000000140000001100010000000000000000000e00000a"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RREADDIR(r5, &(0x7f00000002c0)={0x68, 0x29, 0x1, {0x3, [{{0x40, 0x4, 0x4}, 0x5, 0x6, 0x7, './file0'}, {{0x0, 0x2}, 0x860, 0x8, 0x7, './file0'}, {{0x40}, 0x0, 0x5, 0x7, './file0'}]}}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x20560a, 0x400, 0x4000002, 0x15b, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f00000010c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="2800fd80df25070000007f3a21ad80ce2ebf8d884e5d2e9852d9f366535d9d9151b8bd75d5587fe5eeb6f4568debac80c56e4f32875acc9f38d788b30dcbf28228e4b92c4f5cd9c4519135cc0f9cd2c6fa0a010000000000000055f2869c4996a606bdf28e8b2be9c68760e01c260b044681d665906624748770ec463188e3d750817cc13e409252be3af59dd67e4d7ce7405057f139faf7b8fc9d427a134012fbf7ee3a22c560a254f1ff3a7e5c371b12b51919bad3656beb543cf2ab4b92161dcbe520c54a000000000000", @ANYRES32=0x0, @ANYBLOB="008201000210000008001c00", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4080) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x50000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x2, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x3, 0x1f1, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e53, 0x2000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r15 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r15, 0x4058534c, &(0x7f00000000c0)={0x80, 0x9, 0x67fff, 0x40069ce, 0xfffff4f1, 0x4}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) read$FUSE(r5, &(0x7f0000008180)={0x2020}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) 5.171936157s ago: executing program 0 (id=3052): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x168, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xde}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x0, 0x7, 0x2}}, @common=@srh={{0x30}, {0x0, 0x4, 0x9f, 0x6, 0x6, 0x1e0c, 0x800}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r1, 0x0, {0x2, 0x1}, 0xfe}, 0x18) readahead(r0, 0x8, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) read$midi(r7, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 5.14432697s ago: executing program 5 (id=3053): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x111, 0x4b4, 0x168, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xde}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x0, 0x7, 0x2}}, @common=@srh={{0x30}, {0x0, 0x4, 0x9f, 0x6, 0x6, 0x1e0c, 0x800}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000003c0)={0x1d, r1, 0x0, {0x2, 0x1}, 0xfe}, 0x18) readahead(r0, 0x8, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) read$midi(r7, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) openat$sequencer(0xffffffffffffff9c, 0x0, 0x4180, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 4.931706089s ago: executing program 4 (id=3054): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000103014bb070000000000010902240001000080020904000001030700000021090003012228000905810308000e0188"], 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x714f, 0x0) fcntl$dupfd(r0, 0x406, r0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x66, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000040930712030000000000010902240001000080010904000002030001000921e10005012200"/54], 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00'}) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r8, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty, 0x1}, 0x1c) 3.821178117s ago: executing program 0 (id=3055): r0 = socket$netlink(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_extract_tcp_res(0x0, 0x80000000, 0xd) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0xff) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000000)=0x80020004, 0x4) listen(r4, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 3.738456626s ago: executing program 1 (id=3056): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x104, 0x8}}, 0x50) r2 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r2) ptrace(0x4208, r2) ptrace(0x4207, r2) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 3.658426137s ago: executing program 5 (id=3057): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x20, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000005500d5090000000000000000070000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32, @ANYBLOB="0000000000000000000000000a000100000000000000001420000100", @ANYRES32, @ANYBLOB="00000000ac1404ae00000000000000000000000086dd"], 0x58}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000092b01fe8000000000000000000000000000bbfe8000004000e3bc00000000000000aa320004000110000050"], 0x0) io_setup(0x20fe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009100)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000300)=""/179, 0xb3}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/191, 0xbf}, {&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000001000)=""/156, 0x9c}], 0x5, &(0x7f0000001140)=""/216, 0xd8}, 0xffffffff}, {{&(0x7f0000001240)=@nfc_llcp, 0x80, &(0x7f0000002580)}, 0x2}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/28, 0x1c}, {&(0x7f0000002980)=""/17, 0x11}, {&(0x7f00000029c0)=""/127, 0x7f}], 0x3, &(0x7f0000002a80)=""/117, 0x75}, 0x7}, {{&(0x7f0000002b00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002b80)=""/152, 0x98}], 0x1, &(0x7f0000002c80)=""/4096, 0x1000}, 0x1000}, {{&(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003d00)=""/243, 0xf3}, {&(0x7f0000003e00)=""/39, 0x27}, {&(0x7f0000003e40)=""/35, 0x23}, {&(0x7f0000003ec0)=""/213, 0xd5}], 0x4, &(0x7f0000004040)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000005400)=@xdp, 0x80, 0x0}, 0x2}], 0x6, 0x12100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x2c}}, 0x0) 2.842726649s ago: executing program 6 (id=3058): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @multicast1, {0x5, 0x4, 0x2, 0x35, 0x9, 0x67, 0x1, 0x5, 0x6c, 0x8, @rand_addr=0x64010102, @loopback}}}}}}, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8010, r2, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2c}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0xfffffffffffffffc, 0x12) unshare(0x2c020400) 2.063596395s ago: executing program 5 (id=3060): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a38010203010902"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400010000000900020073797a3200000000140007800800124000000000050015007f0000000500050002000000050001000600000013000300686173683a6e65742c6966616365000013560bf18d6eb78b3410"], 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x4c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x2}, {0x0, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4c, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0x3800, 0x8, 0x0, 0xe190, 0x3}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x54, 0x0, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) get_mempolicy(0x0, &(0x7f0000000000), 0x200000000001, &(0x7f0000ffd000/0x2000)=nil, 0x4) write$binfmt_script(r7, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r7, 0x40109441, &(0x7f0000000300)={0x1, 0x0, 0x9}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x20, 0x13, 0x1, 0x2000000, 0x25dfdbff}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) readlinkat(r7, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=""/205, 0xcd) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.442990661s ago: executing program 6 (id=3061): r0 = socket$inet(0x2, 0x3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(0x0, 0x7, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpo']) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x3, &(0x7f0000000100)=0xfffffffffffffff7, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180019c2313f000000f204000001000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1c6) tgkill(r1, r1, 0x16) statx(r5, &(0x7f0000000240)='./cgroup\x00', 0x6000, 0x10, &(0x7f0000000280)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='dvmrp0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4a20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0x2, 0x4, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) 1.213337249s ago: executing program 1 (id=3062): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x8971, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) eventfd(0x5ef) 0s ago: executing program 4 (id=3063): r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r0, 0x0, 0x7fffffffffffffff, 0x1) cachestat(r1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) rmdir(&(0x7f00000000c0)='./bus\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r8, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): snd-usb-audio failed with error -2 [ 1059.383626][T12920] usb 1-1: Using ep0 maxpacket: 8 [ 1059.396195][T12920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1059.485228][T12920] usb 1-1: config 6 has an invalid interface number: 54 but max is 0 [ 1059.506697][T12920] usb 1-1: config 6 has no interface number 0 [ 1059.529288][T16318] netlink: 'syz.5.2540': attribute type 1 has an invalid length. [ 1059.529413][T12920] usb 1-1: config 6 interface 54 has no altsetting 0 [ 1059.552085][T15414] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1059.906554][T12920] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=5a.74 [ 1059.982184][T12920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.065878][T12920] usb 1-1: Product: syz [ 1060.116178][T12920] usb 1-1: Manufacturer: syz [ 1060.172207][T16157] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1060.172531][T12920] usb 1-1: SerialNumber: syz [ 1060.275786][ T29] audit: type=1400 audit(1782755244.028:13212): avc: denied { create } for pid=16320 comm="syz.6.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1060.381377][T15414] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1060.433735][T15414] usb 6-1: USB disconnect, device number 80 [ 1060.468238][T16157] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1060.491081][T16157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.494092][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.518233][T16157] usb 2-1: Product: syz [ 1060.526108][T16157] usb 2-1: Manufacturer: syz [ 1060.534053][T16157] usb 2-1: SerialNumber: syz [ 1060.548268][T16157] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1060.566029][ T5739] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1060.685343][ T29] audit: type=1326 audit(1782755244.428:13213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.0.2533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1060.724971][ T29] audit: type=1326 audit(1782755244.428:13214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.0.2533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1060.751513][ T29] audit: type=1326 audit(1782755244.428:13215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.0.2533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1060.967236][ T29] audit: type=1326 audit(1782755244.428:13216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.0.2533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1060.993871][ T29] audit: type=1326 audit(1782755244.428:13217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.0.2533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1061.084623][T16157] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1061.102514][ T29] audit: type=1326 audit(1782755244.428:13218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.0.2533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1061.129503][ T29] audit: type=1326 audit(1782755244.428:13219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.0.2533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1061.197798][ T29] audit: type=1326 audit(1782755244.428:13220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.0.2533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1061.226775][ T29] audit: type=1326 audit(1782755244.428:13221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16300 comm="syz.0.2533" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1061.320192][ T9] usb 2-1: USB disconnect, device number 113 [ 1061.336898][T16157] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1061.345678][T16157] usb 7-1: config 114 has an invalid interface number: 216 but max is 0 [ 1061.354056][T16157] usb 7-1: config 114 has no interface number 0 [ 1061.365536][T16157] usb 7-1: config 114 interface 216 has no altsetting 0 [ 1061.374806][T16157] usb 7-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 1061.384822][T16157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.392810][T16157] usb 7-1: Product: syz [ 1061.397123][T16157] usb 7-1: Manufacturer: syz [ 1061.402346][T16157] usb 7-1: SerialNumber: syz [ 1061.476573][T16342] loop9: detected capacity change from 0 to 524287999 [ 1061.594607][ T5739] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1061.623362][ T5739] ath9k_htc: Failed to initialize the device [ 1061.822072][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1061.842539][T12920] comedi comedi5: Wrong number of endpoints [ 1061.848472][T12920] dt9812 1-1:6.54: driver 'dt9812' failed to auto-configure device. [ 1061.875491][T12920] usb 1-1: USB disconnect, device number 105 [ 1062.848931][T16356] tmpfs: Unknown parameter 'mpo' [ 1063.398637][T16358] FAULT_INJECTION: forcing a failure. [ 1063.398637][T16358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1063.440860][T16358] CPU: 0 UID: 0 PID: 16358 Comm: syz.0.2551 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.440894][T16358] Tainted: [L]=SOFTLOCKUP [ 1063.440902][T16358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1063.440915][T16358] Call Trace: [ 1063.440922][T16358] [ 1063.440930][T16358] dump_stack_lvl+0x100/0x190 [ 1063.440967][T16358] should_fail_ex.cold+0x5/0xa [ 1063.440998][T16358] ? prepare_alloc_pages+0x16d/0x5f0 [ 1063.441028][T16358] should_fail_alloc_page+0xeb/0x140 [ 1063.441058][T16358] prepare_alloc_pages+0x1f0/0x5f0 [ 1063.441091][T16358] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1063.441117][T16358] ? find_held_lock+0x2b/0x80 [ 1063.441137][T16358] ? is_bpf_text_address+0x8a/0x1a0 [ 1063.441164][T16358] ? is_bpf_text_address+0x8a/0x1a0 [ 1063.441190][T16358] ? bpf_ksym_find+0x128/0x1c0 [ 1063.441218][T16358] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1063.441241][T16358] ? is_bpf_text_address+0x94/0x1a0 [ 1063.441268][T16358] ? kernel_text_address+0x8d/0x100 [ 1063.441289][T16358] ? __kernel_text_address+0xd/0x30 [ 1063.441310][T16358] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1063.441340][T16358] ? _parse_integer_limit+0x1ac/0x220 [ 1063.441374][T16358] ? _kstrtoull+0x13c/0x1f0 [ 1063.441403][T16358] ? __pfx__kstrtoull+0x10/0x10 [ 1063.441435][T16358] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1063.441460][T16358] ? policy_nodemask+0xed/0x4f0 [ 1063.441488][T16358] alloc_pages_mpol+0x1fb/0x540 [ 1063.441515][T16358] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1063.441539][T16358] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 1063.441572][T16358] alloc_pages_noprof+0x1a/0x160 [ 1063.441601][T16358] pte_alloc_one+0x1c/0x3d0 [ 1063.441622][T16358] do_fault+0x86c/0x1750 [ 1063.441650][T16358] __handle_mm_fault+0x187d/0x2a00 [ 1063.441683][T16358] ? reacquire_held_locks+0xce/0x1e0 [ 1063.441708][T16358] ? __pfx___handle_mm_fault+0x10/0x10 [ 1063.441743][T16358] ? lock_vma_under_rcu+0x17c/0x590 [ 1063.441779][T16358] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1063.441816][T16358] handle_mm_fault+0x37b/0xa30 [ 1063.441851][T16358] do_user_addr_fault+0x5a3/0x12f0 [ 1063.441889][T16358] exc_page_fault+0x6f/0xd0 [ 1063.441917][T16358] asm_exc_page_fault+0x26/0x30 [ 1063.441937][T16358] RIP: 0033:0x7fd07a56d409 [ 1063.441955][T16358] Code: 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 83 fa 20 72 37 <62> e1 fe 28 6f 06 48 83 fa 40 0f 87 a7 00 00 00 62 e1 fe 28 6f 4c [ 1063.441982][T16358] RSP: 002b:00007fd07b4ccef8 EFLAGS: 00010202 [ 1063.441997][T16358] RAX: 00007fd07b4ccf10 RBX: 0000000000000058 RCX: 00007fd07b4ccf10 [ 1063.442011][T16358] RDX: 0000000000000058 RSI: 0000200000000640 RDI: 00007fd07b4ccf10 [ 1063.442023][T16358] RBP: 00007fd07b4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.442036][T16358] R10: 0000200000000640 R11: 0000000000000000 R12: 0000000000000001 [ 1063.442049][T16358] R13: 00007fd07a816038 R14: 00007fd07a815fa0 R15: 00007fff7401a798 [ 1063.442077][T16358] [ 1063.457240][T16358] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1063.911061][T16157] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 1063.932134][T16157] usb 7-1: selecting invalid altsetting 0 [ 1063.946238][T16157] usb 7-1: USB disconnect, device number 18 [ 1063.946988][T16157] pvrusb2: Device being rendered inoperable [ 1064.004810][T16365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2553'. [ 1064.508723][T16374] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1064.508772][T16374] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1064.508880][T16374] vhci_hcd vhci_hcd.0: Device attached [ 1064.526401][T16375] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 1064.683156][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1064.683219][ T12] vhci_hcd vhci_hcd.0: release socket [ 1064.683254][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1065.544990][T16365] wlan0 speed is unknown, defaulting to 1000 [ 1068.427466][T16400] FAULT_INJECTION: forcing a failure. [ 1068.427466][T16400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.462194][T16400] CPU: 0 UID: 0 PID: 16400 Comm: syz.0.2560 Tainted: G L syzkaller #0 PREEMPT(full) [ 1068.462228][T16400] Tainted: [L]=SOFTLOCKUP [ 1068.462236][T16400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1068.462249][T16400] Call Trace: [ 1068.462257][T16400] [ 1068.462266][T16400] dump_stack_lvl+0x100/0x190 [ 1068.462300][T16400] should_fail_ex.cold+0x5/0xa [ 1068.462330][T16400] _copy_to_user+0x32/0xd0 [ 1068.462360][T16400] simple_read_from_buffer+0xcb/0x170 [ 1068.462387][T16400] proc_fail_nth_read+0x1af/0x230 [ 1068.462419][T16400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1068.462452][T16400] ? rw_verify_area+0xce/0x6d0 [ 1068.462480][T16400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1068.462518][T16400] vfs_read+0x1e4/0xb40 [ 1068.462552][T16400] ? __pfx_vfs_read+0x10/0x10 [ 1068.462581][T16400] ? __fget_files+0x215/0x3d0 [ 1068.462610][T16400] ? __fget_files+0x21f/0x3d0 [ 1068.462641][T16400] ksys_read+0x12a/0x250 [ 1068.462670][T16400] ? __pfx_ksys_read+0x10/0x10 [ 1068.462709][T16400] do_syscall_64+0x115/0x870 [ 1068.462739][T16400] ? clear_bhb_loop+0x40/0x90 [ 1068.462766][T16400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.462788][T16400] RIP: 0033:0x7fd07a55d68e [ 1068.462806][T16400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1068.462827][T16400] RSP: 002b:00007fd07b4abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1068.462847][T16400] RAX: ffffffffffffffda RBX: 00007fd07b4ac6c0 RCX: 00007fd07a55d68e [ 1068.462861][T16400] RDX: 000000000000000f RSI: 00007fd07b4ac0a0 RDI: 0000000000000007 [ 1068.462874][T16400] RBP: 00007fd07b4ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.462887][T16400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.462899][T16400] R13: 00007fd07a816128 R14: 00007fd07a816090 R15: 00007fff7401a798 [ 1068.462930][T16400] [ 1069.282120][T16365] lo speed is unknown, defaulting to 1000 [ 1069.312719][T16365] lo speed is unknown, defaulting to 1000 [ 1069.358217][T16408] FAULT_INJECTION: forcing a failure. [ 1069.358217][T16408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.436362][T16411] random: crng reseeded on system resumption [ 1069.437976][T16408] CPU: 0 UID: 0 PID: 16408 Comm: syz.0.2563 Tainted: G L syzkaller #0 PREEMPT(full) [ 1069.438007][T16408] Tainted: [L]=SOFTLOCKUP [ 1069.438015][T16408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1069.438028][T16408] Call Trace: [ 1069.438035][T16408] [ 1069.438043][T16408] dump_stack_lvl+0x100/0x190 [ 1069.438075][T16408] should_fail_ex.cold+0x5/0xa [ 1069.438104][T16408] _copy_from_user+0x2e/0xd0 [ 1069.438131][T16408] copy_msghdr_from_user+0x9f/0x4c0 [ 1069.438160][T16408] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1069.438201][T16408] ___sys_sendmsg+0x106/0x1e0 [ 1069.438229][T16408] ? __pfx____sys_sendmsg+0x10/0x10 [ 1069.438254][T16408] ? __lock_acquire+0x49f/0x1a40 [ 1069.438280][T16408] ? get_pid_task+0x106/0x250 [ 1069.438329][T16408] __sys_sendmsg+0x160/0x210 [ 1069.438351][T16408] ? __pfx___sys_sendmsg+0x10/0x10 [ 1069.438387][T16408] do_syscall_64+0x115/0x870 [ 1069.438415][T16408] ? clear_bhb_loop+0x40/0x90 [ 1069.438446][T16408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.438467][T16408] RIP: 0033:0x7fd07a59ce59 [ 1069.438484][T16408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.438504][T16408] RSP: 002b:00007fd07b4cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.438526][T16408] RAX: ffffffffffffffda RBX: 00007fd07a815fa0 RCX: 00007fd07a59ce59 [ 1069.438540][T16408] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1069.438552][T16408] RBP: 00007fd07b4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.438565][T16408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.438578][T16408] R13: 00007fd07a816038 R14: 00007fd07a815fa0 R15: 00007fff7401a798 [ 1069.438606][T16408] [ 1069.994260][T12920] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1070.303688][T12921] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1070.403632][T12920] usb 6-1: Using ep0 maxpacket: 16 [ 1070.411805][T12920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.424690][T12920] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1070.437580][T12920] usb 6-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 1070.446875][T12920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.469139][T12920] usb 6-1: config 0 descriptor?? [ 1070.558541][T16426] fuse: Unknown parameter '0x0000000000000003' [ 1070.578975][T16426] fuse: Unknown parameter '0x0000000000000003' [ 1070.648552][T12920] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1070.784515][T12921] usb 1-1: Using ep0 maxpacket: 16 [ 1071.095553][T12921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1071.128917][T12921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1071.140998][T12921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1071.151857][T12921] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1071.231508][T12921] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1071.267919][T12921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.312444][T12921] usb 1-1: Product: syz [ 1071.344106][T12921] usb 1-1: Manufacturer: syz [ 1071.361738][T12921] usb 1-1: SerialNumber: syz [ 1071.389456][T12921] usb 1-1: config 0 descriptor?? [ 1071.459148][T16417] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1071.582772][T16442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.666431][T16442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.684641][T12921] port100 1-1:0.0: NFC: Could not get supported command types [ 1072.231031][T12921] usb 1-1: USB disconnect, device number 106 [ 1072.300999][T16450] FAULT_INJECTION: forcing a failure. [ 1072.300999][T16450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.301092][T16450] CPU: 1 UID: 0 PID: 16450 Comm: syz.4.2574 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.301124][T16450] Tainted: [L]=SOFTLOCKUP [ 1072.301131][T16450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1072.301144][T16450] Call Trace: [ 1072.301152][T16450] [ 1072.301160][T16450] dump_stack_lvl+0x100/0x190 [ 1072.301193][T16450] should_fail_ex.cold+0x5/0xa [ 1072.301224][T16450] _copy_to_user+0x32/0xd0 [ 1072.301253][T16450] simple_read_from_buffer+0xcb/0x170 [ 1072.301279][T16450] proc_fail_nth_read+0x1af/0x230 [ 1072.301311][T16450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1072.301344][T16450] ? rw_verify_area+0xce/0x6d0 [ 1072.301373][T16450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1072.301403][T16450] vfs_read+0x1e4/0xb40 [ 1072.301437][T16450] ? __pfx_vfs_read+0x10/0x10 [ 1072.301467][T16450] ? __fget_files+0x215/0x3d0 [ 1072.301496][T16450] ? __fget_files+0x21f/0x3d0 [ 1072.301526][T16450] ksys_read+0x12a/0x250 [ 1072.301555][T16450] ? __pfx_ksys_read+0x10/0x10 [ 1072.301594][T16450] do_syscall_64+0x115/0x870 [ 1072.301623][T16450] ? clear_bhb_loop+0x40/0x90 [ 1072.301675][T16450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.301697][T16450] RIP: 0033:0x7f87ef35d68e [ 1072.301714][T16450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1072.301735][T16450] RSP: 002b:00007f87f023dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1072.301755][T16450] RAX: ffffffffffffffda RBX: 00007f87f023e6c0 RCX: 00007f87ef35d68e [ 1072.301769][T16450] RDX: 000000000000000f RSI: 00007f87f023e0a0 RDI: 0000000000000005 [ 1072.301782][T16450] RBP: 00007f87f023e090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.301796][T16450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.301809][T16450] R13: 00007f87ef616218 R14: 00007f87ef616180 R15: 00007fff1c2b1648 [ 1072.301838][T16450] [ 1072.302304][T16446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2571'. [ 1072.851510][T12921] usb 6-1: USB disconnect, device number 81 [ 1073.208723][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1074.105224][ T9] usb 7-1: device descriptor read/64, error -71 [ 1074.454826][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1074.594814][ T9] usb 7-1: device descriptor read/64, error -71 [ 1074.714750][ T9] usb usb7-port1: attempt power cycle [ 1074.864739][ T5739] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1075.005045][ T5739] usb 2-1: device descriptor read/64, error -71 [ 1075.115072][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1075.238475][ T9] usb 7-1: device descriptor read/8, error -71 [ 1075.299119][ T5739] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1075.485274][ T5739] usb 2-1: device descriptor read/64, error -71 [ 1075.524545][ T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1075.566749][ T9] usb 7-1: device descriptor read/8, error -71 [ 1075.942175][ T5739] usb usb2-port1: attempt power cycle [ 1075.949648][ T9] usb usb7-port1: unable to enumerate USB device [ 1077.706066][ T5739] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1079.700835][T16497] macsec0: entered allmulticast mode [ 1079.706990][T16497] veth1_macvtap: entered allmulticast mode [ 1079.937491][T16490] macsec0: left allmulticast mode [ 1079.945589][T16490] veth1_macvtap: left allmulticast mode [ 1080.290568][ T5739] usb 2-1: device descriptor read/8, error -71 [ 1080.493947][ T29] kauditd_printk_skb: 2597 callbacks suppressed [ 1080.493989][ T29] audit: type=1400 audit(1782755264.248:15819): avc: denied { cmd } for pid=16503 comm="syz.6.2590" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 1080.547668][ T9] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1081.327649][ T29] audit: type=1400 audit(1782755264.388:15820): avc: denied { map } for pid=16503 comm="syz.6.2590" path="/dev/ublkc0" dev="devtmpfs" ino=3772 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1081.380966][T16513] fuse: Unknown parameter '0x0000000000000003' [ 1081.396427][T16513] fuse: Unknown parameter '0x0000000000000003' [ 1081.475427][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1081.693012][ T9] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1081.955677][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.012252][ T9] usb 1-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1082.074517][T16515] netlink: 'syz.4.2594': attribute type 1 has an invalid length. [ 1082.090513][T16525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2595'. [ 1082.122501][ T9] usb 1-1: Manufacturer: Ь [ 1082.146688][ T9] usb 1-1: SerialNumber: syz [ 1082.670409][T16529] binder_alloc: 16524: binder_alloc_buf, no vma [ 1083.266478][ T29] audit: type=1400 audit(1782755267.028:15821): avc: denied { getopt } for pid=16533 comm="syz.4.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1083.461397][T16543] FAULT_INJECTION: forcing a failure. [ 1083.461397][T16543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.479719][T16543] CPU: 1 UID: 0 PID: 16543 Comm: syz.4.2601 Tainted: G L syzkaller #0 PREEMPT(full) [ 1083.479752][T16543] Tainted: [L]=SOFTLOCKUP [ 1083.479766][T16543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1083.479778][T16543] Call Trace: [ 1083.479785][T16543] [ 1083.479794][T16543] dump_stack_lvl+0x100/0x190 [ 1083.479826][T16543] should_fail_ex.cold+0x5/0xa [ 1083.479855][T16543] _copy_from_user+0x2e/0xd0 [ 1083.479881][T16543] __sys_bpf+0x2f5/0x4e80 [ 1083.479910][T16543] ? __pfx___sys_bpf+0x10/0x10 [ 1083.479930][T16543] ? find_held_lock+0x2b/0x80 [ 1083.479950][T16543] ? get_pid_task+0xfc/0x250 [ 1083.479970][T16543] ? get_pid_task+0xfc/0x250 [ 1083.479997][T16543] ? find_held_lock+0x2b/0x80 [ 1083.480021][T16543] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1083.480042][T16543] ? find_held_lock+0x2b/0x80 [ 1083.480061][T16543] ? ksys_write+0x190/0x250 [ 1083.480080][T16543] ? ksys_write+0x190/0x250 [ 1083.480120][T16543] ? fput+0x79/0x100 [ 1083.480147][T16543] ? __x64_sys_bpf+0xce/0x140 [ 1083.480165][T16543] __x64_sys_bpf+0xce/0x140 [ 1083.480185][T16543] ? do_syscall_64+0x90/0x870 [ 1083.480213][T16543] do_syscall_64+0x115/0x870 [ 1083.480240][T16543] ? clear_bhb_loop+0x40/0x90 [ 1083.480263][T16543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.480286][T16543] RIP: 0033:0x7f87ef39ce59 [ 1083.480304][T16543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.480325][T16543] RSP: 002b:00007f87f0280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1083.480346][T16543] RAX: ffffffffffffffda RBX: 00007f87ef615fa0 RCX: 00007f87ef39ce59 [ 1083.480361][T16543] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1083.480374][T16543] RBP: 00007f87f0280090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.480387][T16543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.480400][T16543] R13: 00007f87ef616038 R14: 00007f87ef615fa0 R15: 00007fff1c2b1648 [ 1083.480429][T16543] [ 1083.984538][T11132] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1084.125085][T11132] usb 6-1: device descriptor read/64, error -71 [ 1084.414635][T11132] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1084.634474][T11132] usb 6-1: device descriptor read/64, error -71 [ 1084.749674][T11132] usb usb6-port1: attempt power cycle [ 1085.236424][T11132] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1085.300911][T11132] usb 6-1: device descriptor read/8, error -71 [ 1085.418779][ T9] usb 1-1: USB disconnect, device number 107 [ 1085.484478][T16563] fuse: Unknown parameter '0x0000000000000003' [ 1085.509776][T16563] fuse: Unknown parameter '0x0000000000000003' [ 1085.751180][T11132] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1085.915599][T11132] usb 6-1: device descriptor read/8, error -71 [ 1086.048437][ T9] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1086.063955][T11132] usb usb6-port1: unable to enumerate USB device [ 1086.255380][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1086.357918][ T9] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1086.398084][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.419122][ T9] usb 1-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1086.468239][ T9] usb 1-1: Manufacturer: Ь [ 1086.543120][T15414] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1086.748772][ T9] usb 1-1: SerialNumber: syz [ 1086.875855][T15414] usb 7-1: not running at top speed; connect to a high speed hub [ 1086.890948][T16579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2611'. [ 1086.919738][T15414] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1086.933363][T15414] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 4 [ 1087.031446][T16584] binder_alloc: 16577: binder_alloc_buf, no vma [ 1087.434857][T15414] usb 7-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40 [ 1087.465752][T15414] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.486779][T15414] usb 7-1: Product: ဌ [ 1087.497836][T15414] usb 7-1: Manufacturer: В [ 1088.284662][T15414] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1088.319963][T15414] usb 7-1: USB disconnect, device number 23 [ 1089.682739][ T9] usb 1-1: USB disconnect, device number 108 [ 1090.186221][T16621] fuse: Unknown parameter '0x0000000000000003' [ 1090.217409][T16621] fuse: Unknown parameter '0x0000000000000003' [ 1090.519075][T16627] tmpfs: Unknown parameter 'mpo' [ 1091.297745][ T9] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1091.395293][T11132] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1091.626843][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1091.735484][T11132] usb 2-1: Using ep0 maxpacket: 32 [ 1091.766167][T11132] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1091.818991][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.834432][T11132] usb 2-1: config 0 has no interface number 0 [ 1091.860540][T11132] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1091.868952][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1091.901875][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1091.914252][T11132] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1091.939675][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.948704][T11132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.958648][T11132] usb 2-1: Product: syz [ 1091.976367][T11132] usb 2-1: Manufacturer: syz [ 1092.000077][T11132] usb 2-1: SerialNumber: syz [ 1092.035973][ T9] usb 1-1: config 0 descriptor?? [ 1092.154520][T16157] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1092.228560][T11132] usb 2-1: config 0 descriptor?? [ 1092.381948][T16157] usb 7-1: device descriptor read/64, error -71 [ 1092.654645][T16157] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1092.714631][ T9] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1092.977388][T16157] usb 7-1: device descriptor read/64, error -71 [ 1093.118282][T16157] usb usb7-port1: attempt power cycle [ 1093.153336][ T9] usb 6-1: device descriptor read/64, error -71 [ 1093.394483][ T9] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1093.442211][T12920] usb 1-1: USB disconnect, device number 109 [ 1093.496569][T16157] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1093.608183][T11132] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1093.710789][ T9] usb 6-1: device descriptor read/64, error -71 [ 1093.745097][T16157] usb 7-1: device descriptor read/8, error -71 [ 1093.763042][T11132] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1093.812763][T11132] usb 2-1: USB disconnect, device number 118 [ 1093.855786][ T9] usb usb6-port1: attempt power cycle [ 1094.658680][T16157] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1094.799913][T16157] usb 7-1: device descriptor read/8, error -71 [ 1094.844855][ T9] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1094.888069][ T9] usb 6-1: device descriptor read/8, error -71 [ 1094.925591][T16157] usb usb7-port1: unable to enumerate USB device [ 1095.116567][T15414] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1095.184803][T16672] xt_HMARK: spi-set and port-set can't be combined [ 1095.395571][T15414] usb 1-1: Using ep0 maxpacket: 16 [ 1095.717473][T15414] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1095.747537][T15414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.782289][T15414] usb 1-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1095.903272][T15414] usb 1-1: Manufacturer: Ь [ 1095.922742][T15414] usb 1-1: SerialNumber: syz [ 1097.161530][T16697] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1097.550820][ T5797] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1097.713645][ T5797] usb 7-1: Using ep0 maxpacket: 16 [ 1097.721748][ T5797] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.733680][ T5797] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1097.746565][ T5797] usb 7-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 1097.755600][ T5797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.773832][ T5797] usb 7-1: config 0 descriptor?? [ 1097.956892][ T5797] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1098.060641][T16705] tmpfs: Unknown parameter 'mpo' [ 1098.629248][T15414] usb 1-1: USB disconnect, device number 110 [ 1098.661143][T16708] fuse: Invalid rootmode [ 1098.744403][T16711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.759095][T16711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.822659][ T805] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1098.831229][T16714] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1099.014104][T15414] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1099.024386][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 1099.053350][ T805] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1099.063774][ T805] usb 2-1: config 0 has no interface number 0 [ 1099.073933][ T805] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1099.119513][ T805] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1099.132298][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.143895][ T805] usb 2-1: Product: syz [ 1099.149035][ T805] usb 2-1: Manufacturer: syz [ 1099.156478][ T805] usb 2-1: SerialNumber: syz [ 1099.185274][T15414] usb 1-1: device descriptor read/64, error -71 [ 1099.189692][ T805] usb 2-1: config 0 descriptor?? [ 1099.634415][T15414] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1100.073155][T16157] usb 7-1: USB disconnect, device number 28 [ 1100.085635][T15414] usb 1-1: device descriptor read/64, error -71 [ 1100.214622][T15414] usb usb1-port1: attempt power cycle [ 1100.445201][T16157] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1100.469213][T16722] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1100.482180][T16722] File: /dev/nullb0 PID: 16722 Comm: syz.5.2647 [ 1100.554463][T15414] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1100.585390][T15414] usb 1-1: device descriptor read/8, error -71 [ 1100.604529][T16157] usb 7-1: Using ep0 maxpacket: 32 [ 1100.612247][T16157] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1100.621687][T16157] usb 7-1: config 0 has no interface number 0 [ 1100.634538][T16157] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1100.650551][T16157] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1100.675867][T16157] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1100.701704][T16157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.752485][ T805] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1100.794120][ T805] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1100.807143][T16157] usb 7-1: Product: syz [ 1100.810574][ T805] usb 2-1: USB disconnect, device number 119 [ 1100.820820][T16157] usb 7-1: Manufacturer: syz [ 1100.839145][T16157] usb 7-1: SerialNumber: syz [ 1100.845770][T15414] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1100.878303][T16157] usb 7-1: config 0 descriptor?? [ 1100.887752][T15414] usb 1-1: device descriptor read/8, error -71 [ 1100.898675][T16157] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1100.909045][T16157] em28xx 7-1:0.89: Video interface 89 found: [ 1101.004430][T15414] usb usb1-port1: unable to enumerate USB device [ 1101.250191][T16732] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1101.745979][T16720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16720 comm=syz.6.2646 [ 1102.022109][T16742] netlink: 'syz.0.2650': attribute type 1 has an invalid length. [ 1102.036339][T16157] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1103.077526][T16157] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1103.101539][T16157] em28xx 7-1:0.89: board has no eeprom [ 1103.194413][T16157] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1103.218393][T16157] em28xx 7-1:0.89: analog set to bulk mode. [ 1103.238814][T15414] em28xx 7-1:0.89: Registering V4L2 extension [ 1103.270346][T16157] usb 7-1: USB disconnect, device number 29 [ 1103.307233][T16157] em28xx 7-1:0.89: Disconnecting em28xx [ 1103.343175][T16753] fuse: Invalid rootmode [ 1103.371522][T15414] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1103.392390][T15414] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1103.400199][T15414] em28xx 7-1:0.89: No AC97 audio processor [ 1103.413822][T15414] usb 7-1: Decoder not found [ 1103.418769][T15414] em28xx 7-1:0.89: failed to create media graph [ 1103.426312][T15414] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1103.437749][T15414] em28xx 7-1:0.89: Registering snapshot button... [ 1103.450952][T15414] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input44 [ 1103.464518][ T5739] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1103.483255][T15414] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1103.492756][T16157] em28xx 7-1:0.89: Closing input extension [ 1103.499487][T16157] em28xx 7-1:0.89: Deregistering snapshot button [ 1103.541424][T16157] em28xx 7-1:0.89: Freeing device [ 1103.624547][ T5739] usb 6-1: Using ep0 maxpacket: 16 [ 1103.646742][ T5739] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1103.665177][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.688320][ T5739] usb 6-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1103.751831][ T5739] usb 6-1: Manufacturer: Ь [ 1103.788805][ T5739] usb 6-1: SerialNumber: syz [ 1105.004477][T16774] tmpfs: Unknown parameter 'mpo' [ 1105.264744][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1105.614499][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1105.624962][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1105.648050][ T9] usb 2-1: config 0 has no interface number 0 [ 1105.656800][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1105.679212][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1106.101394][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.110679][ T9] usb 2-1: Product: syz [ 1106.116082][ T9] usb 2-1: Manufacturer: syz [ 1106.120719][ T9] usb 2-1: SerialNumber: syz [ 1106.181862][ T9] usb 2-1: config 0 descriptor?? [ 1106.293046][ T5739] usb 6-1: USB disconnect, device number 90 [ 1106.684515][T15414] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1106.864495][T15414] usb 1-1: device descriptor read/64, error -71 [ 1107.304483][T15414] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1107.446330][T15414] usb 1-1: device descriptor read/64, error -71 [ 1107.689754][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1107.704567][T15414] usb usb1-port1: attempt power cycle [ 1107.713338][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1107.764653][ T9] usb 2-1: USB disconnect, device number 120 [ 1108.000424][T16807] netlink: 'syz.1.2668': attribute type 1 has an invalid length. [ 1108.045228][T15414] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1108.084850][T15414] usb 1-1: device descriptor read/8, error -71 [ 1108.790033][T15414] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1108.838582][T16818] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1109.524947][T15414] usb 1-1: device descriptor read/8, error -71 [ 1109.721074][T15414] usb usb1-port1: unable to enumerate USB device [ 1109.757648][T16827] FAULT_INJECTION: forcing a failure. [ 1109.757648][T16827] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.772876][T16827] CPU: 0 UID: 0 PID: 16827 Comm: syz.6.2673 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.772904][T16827] Tainted: [L]=SOFTLOCKUP [ 1109.772911][T16827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1109.772922][T16827] Call Trace: [ 1109.772929][T16827] [ 1109.772937][T16827] dump_stack_lvl+0x100/0x190 [ 1109.772968][T16827] should_fail_ex.cold+0x5/0xa [ 1109.772996][T16827] should_failslab+0xc2/0x120 [ 1109.773023][T16827] __kmalloc_noprof+0xfc/0x820 [ 1109.773045][T16827] ? rcu_is_watching+0x12/0xc0 [ 1109.773072][T16827] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1109.773109][T16827] tomoyo_realpath_from_path+0xb6/0x690 [ 1109.773144][T16827] tomoyo_path_number_perm+0x23c/0x580 [ 1109.773167][T16827] ? tomoyo_path_number_perm+0x22e/0x580 [ 1109.773199][T16827] ? __kvm_handle_async_pf+0x54/0xa0 [ 1109.773229][T16827] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1109.773276][T16827] ? find_held_lock+0x2b/0x80 [ 1109.773295][T16827] ? __fget_files+0x215/0x3d0 [ 1109.773312][T16827] ? hook_file_ioctl_common+0x140/0x440 [ 1109.773331][T16827] ? __fget_files+0x215/0x3d0 [ 1109.773355][T16827] ? __fget_files+0x21f/0x3d0 [ 1109.773379][T16827] security_file_ioctl+0xd3/0x230 [ 1109.773407][T16827] __x64_sys_ioctl+0xb7/0x210 [ 1109.773436][T16827] do_syscall_64+0x115/0x870 [ 1109.773464][T16827] ? clear_bhb_loop+0x40/0x90 [ 1109.773493][T16827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.773515][T16827] RIP: 0033:0x7f4338f9ce59 [ 1109.773532][T16827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.773550][T16827] RSP: 002b:00007f4339e89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.773569][T16827] RAX: ffffffffffffffda RBX: 00007f4339216180 RCX: 00007f4338f9ce59 [ 1109.773583][T16827] RDX: 0000200000000180 RSI: 00000000c0045627 RDI: 0000000000000003 [ 1109.773594][T16827] RBP: 00007f4339e89090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.773605][T16827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.773617][T16827] R13: 00007f4339216218 R14: 00007f4339216180 R15: 00007ffc196a8718 [ 1109.773645][T16827] [ 1109.990550][T16827] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1110.300290][ T9] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1110.474591][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1110.488963][ T9] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1110.515357][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.533085][ T9] usb 6-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1110.739516][ T9] usb 6-1: Manufacturer: Ь [ 1110.744985][ T9] usb 6-1: SerialNumber: syz [ 1110.794734][T15414] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1110.880396][T16839] fuse: Unknown parameter 'fd0x0000000000000003' [ 1110.889690][T16839] fuse: Unknown parameter 'fd0x0000000000000003' [ 1110.954540][T15414] usb 1-1: Using ep0 maxpacket: 16 [ 1110.965102][T15414] usb 1-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1111.084840][T15414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.119187][T15414] usb 1-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1111.143196][T15414] usb 1-1: Manufacturer: Ь [ 1111.149293][T15414] usb 1-1: SerialNumber: syz [ 1113.895155][T16882] netlink: 'syz.4.2683': attribute type 1 has an invalid length. [ 1114.204713][ T9] usb 6-1: USB disconnect, device number 91 [ 1114.490222][T15414] usb 1-1: USB disconnect, device number 119 [ 1114.563360][T16894] netlink: 'syz.6.2685': attribute type 1 has an invalid length. [ 1115.116983][ T29] audit: type=1400 audit(1782755298.788:15822): avc: denied { map } for pid=16889 comm="syz.1.2687" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1115.240010][ T29] audit: type=1400 audit(1782755298.878:15823): avc: denied { execute } for pid=16889 comm="syz.1.2687" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1115.572616][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.585395][ T5739] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1115.598864][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.914844][ T5739] usb 2-1: device descriptor read/64, error -71 [ 1115.952069][T16913] FAULT_INJECTION: forcing a failure. [ 1115.952069][T16913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.016466][T16913] CPU: 0 UID: 0 PID: 16913 Comm: syz.5.2692 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.016500][T16913] Tainted: [L]=SOFTLOCKUP [ 1116.016508][T16913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.016520][T16913] Call Trace: [ 1116.016528][T16913] [ 1116.016537][T16913] dump_stack_lvl+0x100/0x190 [ 1116.016570][T16913] should_fail_ex.cold+0x5/0xa [ 1116.016598][T16913] _copy_from_user+0x2e/0xd0 [ 1116.016626][T16913] do_replace+0x3f7/0x490 [ 1116.016657][T16913] ? __pfx_do_replace+0x10/0x10 [ 1116.016695][T16913] ? bpf_lsm_capable+0x9/0x10 [ 1116.016717][T16913] ? security_capable+0x80/0x260 [ 1116.016745][T16913] do_ebt_set_ctl+0x555/0x670 [ 1116.016777][T16913] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1116.016808][T16913] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1116.016838][T16913] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1116.016863][T16913] nf_setsockopt+0x8d/0xf0 [ 1116.016886][T16913] ip_setsockopt+0xcb/0xf0 [ 1116.016911][T16913] sctp_setsockopt+0x161/0xb370 [ 1116.016945][T16913] ? __pfx_sctp_setsockopt+0x10/0x10 [ 1116.016971][T16913] ? __fget_files+0x215/0x3d0 [ 1116.016999][T16913] ? selinux_socket_setsockopt+0x6a/0x80 [ 1116.017026][T16913] ? sock_common_setsockopt+0x2e/0xf0 [ 1116.017051][T16913] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1116.017079][T16913] do_sock_setsockopt+0xf3/0x1d0 [ 1116.017115][T16913] __sys_setsockopt+0x195/0x220 [ 1116.017143][T16913] __x64_sys_setsockopt+0xbd/0x160 [ 1116.017163][T16913] ? do_syscall_64+0x90/0x870 [ 1116.017192][T16913] ? lockdep_hardirqs_on+0x78/0x100 [ 1116.017222][T16913] do_syscall_64+0x115/0x870 [ 1116.017249][T16913] ? clear_bhb_loop+0x40/0x90 [ 1116.017275][T16913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.017297][T16913] RIP: 0033:0x7feccf99ce59 [ 1116.017314][T16913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.017334][T16913] RSP: 002b:00007fecd08c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1116.017353][T16913] RAX: ffffffffffffffda RBX: 00007feccfc15fa0 RCX: 00007feccf99ce59 [ 1116.017366][T16913] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1116.017377][T16913] RBP: 00007fecd08c9090 R08: 0000000000000108 R09: 0000000000000000 [ 1116.017390][T16913] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1116.017402][T16913] R13: 00007feccfc16038 R14: 00007feccfc15fa0 R15: 00007ffefe8ab648 [ 1116.017430][T16913] [ 1116.400164][ T5739] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1116.534431][ T5739] usb 2-1: device descriptor read/64, error -71 [ 1116.644313][ T5739] usb usb2-port1: attempt power cycle [ 1116.918199][T15414] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1116.984678][ T5739] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1117.005848][ T5797] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1117.040942][ T5739] usb 2-1: device descriptor read/8, error -71 [ 1117.055447][T15414] usb 6-1: device descriptor read/64, error -71 [ 1117.213628][ T5797] usb 7-1: Using ep0 maxpacket: 16 [ 1117.285647][ T5739] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1117.305394][T15414] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1117.331951][ T5739] usb 2-1: device descriptor read/8, error -71 [ 1117.374656][ T5797] usb 7-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1117.385272][ T5797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.394571][ T5797] usb 7-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1117.417189][ T5797] usb 7-1: Manufacturer: Ь [ 1117.422428][ T5797] usb 7-1: SerialNumber: syz [ 1117.445895][ T5739] usb usb2-port1: unable to enumerate USB device [ 1117.454091][T15414] usb 6-1: device descriptor read/64, error -71 [ 1117.572407][T15414] usb usb6-port1: attempt power cycle [ 1117.924494][T15414] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1118.105831][T15414] usb 6-1: device descriptor read/8, error -71 [ 1118.169780][T16947] tmpfs: Unknown parameter 'mpo' [ 1119.183407][ T5797] usb 7-1: USB disconnect, device number 30 [ 1119.294552][ T5739] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1119.302332][T15414] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1119.350828][T15414] usb 6-1: device descriptor read/8, error -71 [ 1119.469971][ T5739] usb 2-1: Using ep0 maxpacket: 32 [ 1119.520793][T15414] usb usb6-port1: unable to enumerate USB device [ 1119.534445][ T5739] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1119.553262][ T5739] usb 2-1: config 0 has no interface number 0 [ 1119.570805][ T5739] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1119.630169][ T5739] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1119.686499][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.716980][ T5739] usb 2-1: Product: syz [ 1119.736340][ T5739] usb 2-1: Manufacturer: syz [ 1119.752817][ T5739] usb 2-1: SerialNumber: syz [ 1120.009118][ T5739] usb 2-1: config 0 descriptor?? [ 1120.249249][T16966] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1120.700902][ T2363] pvrusb2: request_firmware fatal error with code=-110 [ 1120.712320][ T2363] pvrusb2: Failure uploading firmware1 [ 1120.720706][ T2363] pvrusb2: Device initialization was not successful. [ 1120.728298][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1120.741217][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1120.779539][ T10] pvrusb2: Device being rendered inoperable [ 1120.913911][T16971] syz.0.2706 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1121.284774][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1121.553262][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1121.565959][ T10] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1121.575141][ T10] usb 5-1: config 0 has no interface number 0 [ 1121.581337][ T10] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1121.592389][ T10] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1121.602456][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1121.663626][T16978] tmpfs: Unknown parameter 'mpo' [ 1122.057075][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.074427][ T10] usb 5-1: Product: syz [ 1122.081783][ T10] usb 5-1: Manufacturer: syz [ 1122.107352][ T10] usb 5-1: SerialNumber: syz [ 1122.118341][ T5739] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1122.171319][ T5739] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1122.181435][ T10] usb 5-1: config 0 descriptor?? [ 1122.207434][ T10] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1122.249424][ T5739] usb 2-1: USB disconnect, device number 125 [ 1122.276690][ T10] em28xx 5-1:0.89: Video interface 89 found: [ 1122.305017][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1122.319861][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1122.383922][ T10] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1122.400362][ T5797] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1122.487265][ T10] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1122.540615][ T10] em28xx 5-1:0.89: board has no eeprom [ 1123.355134][ T10] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1123.369674][T16992] Can't find ip_set type hash:ip,po [ 1123.453931][ T5797] usb 6-1: Using ep0 maxpacket: 32 [ 1123.467598][ T5797] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1123.468039][ T10] em28xx 5-1:0.89: analog set to bulk mode. [ 1123.481368][ T5797] usb 6-1: config 0 has no interface number 0 [ 1123.488697][ T5797] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1123.537712][ T5739] em28xx 5-1:0.89: Registering V4L2 extension [ 1123.572287][ T10] usb 5-1: USB disconnect, device number 34 [ 1123.587437][ T10] em28xx 5-1:0.89: Disconnecting em28xx [ 1123.646757][ T5739] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1123.665553][ T5739] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1123.681447][ T5739] em28xx 5-1:0.89: No AC97 audio processor [ 1123.692992][ T5739] usb 5-1: Decoder not found [ 1123.698328][ T5739] em28xx 5-1:0.89: failed to create media graph [ 1123.706232][ T5739] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1123.714715][ T5797] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1123.715895][ T5739] em28xx 5-1:0.89: Registering snapshot button... [ 1123.737814][ T5797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.746995][ T5739] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input45 [ 1123.747896][ T5797] usb 6-1: Product: syz [ 1123.774911][ T5797] usb 6-1: Manufacturer: syz [ 1123.780173][ T5797] usb 6-1: SerialNumber: syz [ 1123.791459][ T5739] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1123.802605][ T10] em28xx 5-1:0.89: Closing input extension [ 1123.810445][ T10] em28xx 5-1:0.89: Deregistering snapshot button [ 1123.811168][ T5797] usb 6-1: config 0 descriptor?? [ 1123.901079][ T10] em28xx 5-1:0.89: Freeing device [ 1123.994781][T12920] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1124.183654][T12920] usb 7-1: Using ep0 maxpacket: 16 [ 1124.199546][T12920] usb 7-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1124.446640][T12920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.700075][T12920] usb 7-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1124.700130][T12920] usb 7-1: Manufacturer: Ь [ 1124.700161][T12920] usb 7-1: SerialNumber: syz [ 1124.794152][ T10] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1125.057776][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.093456][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1125.430722][ T5797] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1125.442093][ T5797] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 1125.514029][ T5797] usb 6-1: USB disconnect, device number 96 [ 1125.627937][ T10] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1125.880593][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1126.661103][ T10] usb 5-1: Product: syz [ 1126.670339][ T10] usb 5-1: Manufacturer: syz [ 1126.696840][ T10] usb 5-1: config 0 descriptor?? [ 1126.702378][ T10] usb 5-1: can't set config #0, error -71 [ 1126.762437][ T10] usb 5-1: USB disconnect, device number 35 [ 1127.105274][T17029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2720'. [ 1127.558056][T17042] binder_alloc: 17028: binder_alloc_buf, no vma [ 1128.292918][T12920] usb 7-1: USB disconnect, device number 31 [ 1129.584416][ T9] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1129.621915][T17068] xt_HMARK: spi-set and port-set can't be combined [ 1130.071656][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.578028][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1130.594949][ T9] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1130.605276][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1130.613396][ T9] usb 2-1: Product: syz [ 1130.618769][ T9] usb 2-1: Manufacturer: syz [ 1130.623390][ T9] usb 2-1: SerialNumber: syz [ 1130.631501][ T9] usb 2-1: config 0 descriptor?? [ 1130.641013][ T9] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 1130.649389][ T9] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1130.659369][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1131.694477][ T9] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1131.844500][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1131.855826][T17092] tmpfs: Unknown parameter 'mpo' [ 1131.898365][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1131.923367][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.990238][ T9] usb 6-1: config 0 descriptor?? [ 1132.134526][ T5739] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1132.228215][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1132.250616][ T9] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1132.260963][ T9] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1132.311086][ T5797] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1132.315596][ T5739] usb 7-1: Using ep0 maxpacket: 32 [ 1132.329341][ T5739] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1132.338426][ T5739] usb 7-1: config 0 has no interface number 0 [ 1132.345412][ T5739] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1132.355274][ T5739] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1132.374959][T11132] usb 2-1: USB disconnect, device number 126 [ 1132.381932][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.400976][ T5739] usb 7-1: Product: syz [ 1132.409406][ T5739] usb 7-1: Manufacturer: syz [ 1132.415214][ T5739] usb 7-1: SerialNumber: syz [ 1132.425114][ T5739] usb 7-1: config 0 descriptor?? [ 1132.463711][T12920] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1132.623936][ T5797] usb 1-1: Using ep0 maxpacket: 32 [ 1132.634953][ T5797] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1132.644078][T12920] usb 5-1: Using ep0 maxpacket: 16 [ 1132.649708][ T5797] usb 1-1: config 0 has no interface number 0 [ 1132.652010][T17095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2738'. [ 1132.655802][ T5797] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1133.045390][T12920] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1133.065578][ T5797] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1133.105818][T12920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.118173][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.127280][T12920] usb 5-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1133.150515][ T5797] usb 1-1: Product: syz [ 1133.155398][ T5797] usb 1-1: Manufacturer: syz [ 1133.160865][ T5797] usb 1-1: SerialNumber: syz [ 1133.239669][T12920] usb 5-1: Manufacturer: Ь [ 1133.279463][T12920] usb 5-1: SerialNumber: syz [ 1133.316903][ T5797] usb 1-1: config 0 descriptor?? [ 1134.742856][ T5739] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1134.758508][ T5739] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1135.132663][ T5739] usb 7-1: USB disconnect, device number 32 [ 1135.352392][T12920] usb 5-1: USB disconnect, device number 36 [ 1135.687273][ T5797] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1135.698155][ T5797] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1135.707853][ T5797] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1135.727588][ T5797] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1135.764713][ T5797] usb 1-1: USB disconnect, device number 120 [ 1137.244041][ T5797] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1138.034568][ T5797] usb 1-1: device descriptor read/64, error -71 [ 1138.513183][ T5797] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1138.614920][T17149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2750'. [ 1138.714124][T11132] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1138.745127][ T5797] usb 1-1: device descriptor read/64, error -71 [ 1138.805907][T17153] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2749'. [ 1138.904424][T11132] usb 2-1: Using ep0 maxpacket: 32 [ 1138.905103][T17153] wlan0 speed is unknown, defaulting to 1000 [ 1138.917233][T11132] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1138.956751][T11132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.963258][ T5797] usb usb1-port1: attempt power cycle [ 1139.138458][T11132] usb 2-1: config 0 descriptor?? [ 1139.307624][T17153] lo speed is unknown, defaulting to 1000 [ 1139.314812][T17153] lo speed is unknown, defaulting to 1000 [ 1139.356605][T11132] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1139.399267][ T5797] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1139.851370][ T5797] usb 1-1: device descriptor read/8, error -71 [ 1140.103603][T16157] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1140.158203][T17163] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1140.355881][T16157] usb 5-1: Using ep0 maxpacket: 16 [ 1140.612857][T16157] usb 5-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1140.810236][T16157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.822708][T16157] usb 5-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1140.856430][T16157] usb 5-1: Manufacturer: Ь [ 1140.870674][T16157] usb 5-1: SerialNumber: syz [ 1143.515562][ T5739] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1143.690231][ T5739] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1143.724641][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.749953][ T5739] usb 1-1: Product: syz [ 1143.765784][ T5739] usb 1-1: Manufacturer: syz [ 1143.777530][ T5739] usb 1-1: SerialNumber: syz [ 1143.809766][ T5739] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1143.871988][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1143.937242][T17201] xt_HMARK: spi-set and port-set can't be combined [ 1144.613361][ T42] usb 1-1: USB disconnect, device number 125 [ 1144.795230][T16157] usb 5-1: USB disconnect, device number 37 [ 1144.828688][T17206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2762'. [ 1144.942039][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1145.012241][ T10] ath9k_htc: Failed to initialize the device [ 1145.088987][ T42] usb 1-1: ath9k_htc: USB layer deinitialized [ 1145.604501][T15414] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1145.756305][T17221] FAULT_INJECTION: forcing a failure. [ 1145.756305][T17221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.770020][T17221] CPU: 1 UID: 0 PID: 17221 Comm: syz.0.2767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.770041][T17221] Tainted: [L]=SOFTLOCKUP [ 1145.770046][T17221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1145.770054][T17221] Call Trace: [ 1145.770058][T17221] [ 1145.770064][T17221] dump_stack_lvl+0x100/0x190 [ 1145.770085][T17221] should_fail_ex.cold+0x5/0xa [ 1145.770102][T17221] _copy_from_user+0x2e/0xd0 [ 1145.770118][T17221] copy_msghdr_from_user+0x9f/0x4c0 [ 1145.770135][T17221] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1145.770158][T17221] ___sys_sendmsg+0x106/0x1e0 [ 1145.770177][T17221] ? __pfx____sys_sendmsg+0x10/0x10 [ 1145.770191][T17221] ? __lock_acquire+0x49f/0x1a40 [ 1145.770205][T17221] ? get_pid_task+0x106/0x250 [ 1145.770221][T17221] ? lockdep_hardirqs_on+0x78/0x100 [ 1145.770238][T17221] ? irqentry_exit+0x24d/0xa00 [ 1145.770263][T17221] __sys_sendmsg+0x160/0x210 [ 1145.770276][T17221] ? __pfx___sys_sendmsg+0x10/0x10 [ 1145.770297][T17221] do_syscall_64+0x115/0x870 [ 1145.770312][T17221] ? clear_bhb_loop+0x40/0x90 [ 1145.770327][T17221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.770339][T17221] RIP: 0033:0x7fd07a59ce59 [ 1145.770349][T17221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.770361][T17221] RSP: 002b:00007fd07b4ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.770372][T17221] RAX: ffffffffffffffda RBX: 00007fd07a816090 RCX: 00007fd07a59ce59 [ 1145.770380][T17221] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000007 [ 1145.770387][T17221] RBP: 00007fd07b4ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.770394][T17221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.770401][T17221] R13: 00007fd07a816128 R14: 00007fd07a816090 R15: 00007fff7401a798 [ 1145.770416][T17221] [ 1145.774418][T16157] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1145.979219][T15414] usb 5-1: Using ep0 maxpacket: 32 [ 1145.987236][T15414] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1145.997758][T15414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.016866][T15414] usb 5-1: config 0 descriptor?? [ 1146.187558][T16157] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1146.197152][T16157] usb 7-1: config 114 has an invalid interface number: 216 but max is 0 [ 1146.206618][T16157] usb 7-1: config 114 has no interface number 0 [ 1146.212964][T16157] usb 7-1: config 114 interface 216 has no altsetting 0 [ 1146.225855][T16157] usb 7-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 1146.236826][T15414] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1146.246521][T16157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.255350][T16157] usb 7-1: Product: syz [ 1146.259777][T16157] usb 7-1: Manufacturer: syz [ 1146.265026][T16157] usb 7-1: SerialNumber: syz [ 1148.458130][T17248] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1149.155033][T16157] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 1149.191582][T16157] usb 7-1: selecting invalid altsetting 0 [ 1149.211762][ T2363] usb 7-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 1149.229961][T16157] usb 7-1: USB disconnect, device number 33 [ 1149.257812][ T2363] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 1149.292423][T17253] xt_HMARK: spi-set and port-set can't be combined [ 1151.227038][T17269] xt_HMARK: spi-set and port-set can't be combined [ 1152.093644][ T42] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1152.983750][ T42] usb 1-1: device descriptor read/64, error -71 [ 1153.774035][ T42] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1154.253753][ T42] usb 1-1: device descriptor read/64, error -71 [ 1154.375229][ T42] usb usb1-port1: attempt power cycle [ 1155.149174][T17306] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 1155.670764][T17314] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1156.137134][T17316] vivid-007: ================= START STATUS ================= [ 1156.177159][T17316] vivid-007: Enable Output Cropping: true [ 1156.216482][T17316] vivid-007: Enable Output Composing: true [ 1156.250530][T17316] vivid-007: Enable Output Scaler: true [ 1156.276799][T17316] vivid-007: Tx RGB Quantization Range: Automatic [ 1156.293870][T17320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2791'. [ 1156.317186][T17316] vivid-007: Transmit Mode: HDMI [ 1156.328992][T17316] vivid-007: Hotplug Present: 0x00000000 [ 1156.353474][T17316] vivid-007: RxSense Present: 0x00000000 [ 1156.381933][T17316] vivid-007: EDID Present: 0x00000000 [ 1156.396788][T17316] vivid-007: ================== END STATUS ================== [ 1156.453454][T17326] netlink: 'syz.0.2793': attribute type 1 has an invalid length. [ 1157.050469][T17319] FAULT_INJECTION: forcing a failure. [ 1157.050469][T17319] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.420370][T17319] CPU: 0 UID: 0 PID: 17319 Comm: syz.6.2792 Tainted: G L syzkaller #0 PREEMPT(full) [ 1157.420402][T17319] Tainted: [L]=SOFTLOCKUP [ 1157.420409][T17319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1157.420421][T17319] Call Trace: [ 1157.420429][T17319] [ 1157.420437][T17319] dump_stack_lvl+0x100/0x190 [ 1157.420469][T17319] should_fail_ex.cold+0x5/0xa [ 1157.420498][T17319] should_failslab+0xc2/0x120 [ 1157.420526][T17319] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1157.420553][T17319] ? __alloc_skb+0x140/0x710 [ 1157.420578][T17319] __alloc_skb+0x140/0x710 [ 1157.420597][T17319] ? __alloc_skb+0x5b7/0x710 [ 1157.420615][T17319] ? __pfx___alloc_skb+0x10/0x10 [ 1157.420643][T17319] _sctp_make_chunk+0x51/0x270 [ 1157.420677][T17319] sctp_make_control+0x2f/0x2d0 [ 1157.420708][T17319] sctp_make_sack+0x1b1/0x540 [ 1157.420739][T17319] ? __pfx_sctp_make_sack+0x10/0x10 [ 1157.420767][T17319] ? find_held_lock+0x2b/0x80 [ 1157.420793][T17319] sctp_assoc_rwnd_increase+0x51f/0x6e0 [ 1157.420822][T17319] sctp_ulpevent_free+0x217/0x4d0 [ 1157.420852][T17319] sctp_queue_purge_ulpevents+0xb8/0x100 [ 1157.420880][T17319] sctp_close+0x13b/0x980 [ 1157.420907][T17319] ? __pfx_sctp_close+0x10/0x10 [ 1157.420929][T17319] ? __pfx___might_resched+0x10/0x10 [ 1157.420954][T17319] ? lockdep_hardirqs_on+0x78/0x100 [ 1157.420989][T17319] ? down_write+0x146/0x1f0 [ 1157.421006][T17319] ? ip_mc_drop_socket+0x228/0x290 [ 1157.421039][T17319] inet_release+0xed/0x200 [ 1157.421062][T17319] __sock_release+0xb3/0x260 [ 1157.421085][T17319] ? __pfx_sock_close+0x10/0x10 [ 1157.421108][T17319] sock_close+0x1c/0x30 [ 1157.421129][T17319] __fput+0x3ff/0xb50 [ 1157.421157][T17319] ? _raw_spin_unlock_irq+0x23/0x50 [ 1157.421186][T17319] task_work_run+0x150/0x240 [ 1157.421212][T17319] ? __pfx_task_work_run+0x10/0x10 [ 1157.421243][T17319] get_signal+0x1bd/0x21e0 [ 1157.421274][T17319] ? kick_process+0xf0/0x1a0 [ 1157.421300][T17319] ? task_work_add+0x201/0x3b0 [ 1157.421325][T17319] ? __pfx_get_signal+0x10/0x10 [ 1157.421351][T17319] ? __fput_deferred+0x96/0x4a0 [ 1157.421375][T17319] ? __fput_deferred+0xa4/0x4a0 [ 1157.421403][T17319] arch_do_signal_or_restart+0x91/0x7e0 [ 1157.421428][T17319] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1157.421460][T17319] ? fput+0xd9/0x100 [ 1157.421490][T17319] exit_to_user_mode_loop+0x139/0x6f0 [ 1157.421519][T17319] ? rcu_is_watching+0x12/0xc0 [ 1157.421553][T17319] do_syscall_64+0x666/0x870 [ 1157.421582][T17319] ? clear_bhb_loop+0x40/0x90 [ 1157.421608][T17319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.421629][T17319] RIP: 0033:0x7f4338f9ce59 [ 1157.421647][T17319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.421663][T17319] RSP: 002b:00007f4339ecb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1157.421683][T17319] RAX: fffffffffffffe00 RBX: 00007f4339215fa0 RCX: 00007f4338f9ce59 [ 1157.421695][T17319] RDX: 000000000000ffcc RSI: 0000200000000100 RDI: 0000000000000004 [ 1157.421707][T17319] RBP: 00007f4339ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.421726][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1157.421739][T17319] R13: 00007f4339216038 R14: 00007f4339215fa0 R15: 00007ffc196a8718 [ 1157.421770][T17319] [ 1158.105857][T17333] xt_HMARK: spi-set and port-set can't be combined [ 1159.684026][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1159.894645][ T10] usb 1-1: device descriptor read/64, error -71 [ 1160.144485][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1160.274662][ T10] usb 1-1: device descriptor read/64, error -71 [ 1160.401336][ T10] usb usb1-port1: attempt power cycle [ 1161.353544][ T29] audit: type=1400 audit(1782755345.108:15824): avc: denied { ioctl } for pid=17363 comm="syz.4.2804" path="/92/file0/file0" dev="fuse" ino=64 ioctlcmd=0x923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1161.362006][T17368] xt_HMARK: spi-set and port-set can't be combined [ 1161.406340][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1161.449931][ T10] usb 1-1: device descriptor read/8, error -71 [ 1161.468946][T17364] md: superblock version 12389 not known [ 1161.476358][T17364] md: couldn't set array info. -22 [ 1161.717169][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1161.748794][ T10] usb 1-1: device descriptor read/8, error -71 [ 1161.866671][ T10] usb usb1-port1: unable to enumerate USB device [ 1161.936659][T17374] fuse: Bad value for 'rootmode' [ 1163.984886][T17392] tmpfs: Unknown parameter 'mpo' [ 1164.868004][T17404] xt_HMARK: spi-set and port-set can't be combined [ 1165.682461][T17414] fuse: Bad value for 'rootmode' [ 1165.717149][T17410] md: superblock version 12389 not known [ 1165.734396][T17410] md: couldn't set array info. -22 [ 1167.288087][T17429] xt_HMARK: spi-set and port-set can't be combined [ 1168.268399][T12920] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1168.776467][T12920] usb 1-1: Using ep0 maxpacket: 32 [ 1168.789606][T12920] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1168.797645][T17450] xt_HMARK: spi-set and port-set can't be combined [ 1168.800002][T12920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.824486][T12920] usb 1-1: config 0 descriptor?? [ 1169.530657][T12920] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1169.885552][T17461] md: superblock version 12389 not known [ 1169.891301][T17461] md: couldn't set array info. -22 [ 1169.951483][T17467] fuse: Bad value for 'fd' [ 1172.588388][T17500] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1172.616210][T17500] CIFS mount error: No usable UNC path provided in device string! [ 1172.616210][T17500] [ 1172.628692][T17500] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1172.798180][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2839'. [ 1172.845926][T17499] xt_HMARK: spi-set and port-set can't be combined [ 1173.609042][ T29] audit: type=1400 audit(1782755357.358:15825): avc: denied { create } for pid=17496 comm="syz.6.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1174.901886][T17512] md: superblock version 12389 not known [ 1174.917114][T17512] md: couldn't set array info. -22 [ 1174.978308][T17521] xt_HMARK: spi-set and port-set can't be combined [ 1175.828522][ T29] audit: type=1400 audit(1782755359.588:15826): avc: denied { create } for pid=17527 comm="syz.1.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1175.857147][T17532] fuse: Bad value for 'fd' [ 1175.873102][ T29] audit: type=1400 audit(1782755359.608:15827): avc: denied { ioctl } for pid=17527 comm="syz.1.2848" path="socket:[70900]" dev="sockfs" ino=70900 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1175.926640][ T29] audit: type=1400 audit(1782755359.618:15828): avc: denied { bind } for pid=17527 comm="syz.1.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1176.016845][ T29] audit: type=1400 audit(1782755359.638:15829): avc: denied { prog_load } for pid=17528 comm="syz.6.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1176.036069][ T29] audit: type=1400 audit(1782755359.638:15830): avc: denied { bpf } for pid=17528 comm="syz.6.2847" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1177.006839][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.013283][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.267773][ T29] audit: type=1400 audit(1782755361.028:15831): avc: denied { map_create } for pid=17543 comm="syz.1.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1177.300152][T17547] netlink: 'syz.1.2853': attribute type 1 has an invalid length. [ 1177.665858][ T29] audit: type=1400 audit(1782755361.428:15832): avc: denied { perfmon } for pid=17552 comm="syz.6.2854" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1177.694869][T17553] loop5: detected capacity change from 0 to 7 [ 1177.701926][T17553] Dev loop5: unable to read RDB block 7 [ 1177.708598][T17553] loop5: AHDI p1 p2 [ 1177.714916][T17553] loop5: partition table partially beyond EOD, truncated [ 1177.741849][T17553] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1178.008549][ T29] audit: type=1400 audit(1782755361.768:15833): avc: denied { prog_run } for pid=17557 comm="syz.6.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1178.035100][ T29] audit: type=1400 audit(1782755361.798:15834): avc: denied { map_read map_write } for pid=17557 comm="syz.6.2856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1178.126869][T17558] md: superblock version 12389 not known [ 1178.132580][T17558] md: couldn't set array info. -22 [ 1178.432628][T17561] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 1178.460646][T17561] File: /dev/nullb0 PID: 17561 Comm: syz.6.2857 [ 1179.343092][T17570] xt_HMARK: spi-set and port-set can't be combined [ 1179.384525][T17574] fuse: Bad value for 'fd' [ 1180.123064][T17581] xt_HMARK: spi-set and port-set can't be combined [ 1181.298244][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2864'. [ 1181.319050][T17585] wlan0 speed is unknown, defaulting to 1000 [ 1181.425511][T17585] lo speed is unknown, defaulting to 1000 [ 1181.432121][T17585] lo speed is unknown, defaulting to 1000 [ 1181.566403][T17599] md: superblock version 12389 not known [ 1181.572375][T17599] md: couldn't set array info. -22 [ 1182.341684][T17614] netlink: 'syz.4.2871': attribute type 1 has an invalid length. [ 1184.040055][T17624] fuse: Bad value for 'fd' [ 1186.773379][T17640] xt_HMARK: spi-set and port-set can't be combined [ 1187.430221][T17651] xt_HMARK: spi-set and port-set can't be combined [ 1188.600825][T17668] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1189.430289][T17677] netlink: 'syz.4.2886': attribute type 1 has an invalid length. [ 1190.871563][T17688] xt_HMARK: spi-set and port-set can't be combined [ 1191.889957][T17700] netlink: 'syz.6.2891': attribute type 1 has an invalid length. [ 1192.300613][T17703] FAULT_INJECTION: forcing a failure. [ 1192.300613][T17703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.515283][T11132] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1192.517451][T12920] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1192.531285][T15414] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1192.531357][T15414] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1192.543040][T17709] fuse: Unknown parameter '0x0000000000000003' [ 1192.548615][T12920] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1192.691299][T15414] usb 5-1: USB disconnect, device number 38 [ 1192.700983][T17703] CPU: 0 UID: 0 PID: 17703 Comm: syz.1.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 1192.701014][T17703] Tainted: [L]=SOFTLOCKUP [ 1192.701022][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1192.701034][T17703] Call Trace: [ 1192.701042][T17703] [ 1192.701051][T17703] dump_stack_lvl+0x100/0x190 [ 1192.701083][T17703] should_fail_ex.cold+0x5/0xa [ 1192.701113][T17703] _copy_from_user+0x2e/0xd0 [ 1192.701140][T17703] copy_msghdr_from_user+0x9f/0x4c0 [ 1192.701170][T17703] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1192.701202][T17703] ? irqentry_exit+0x24d/0xa00 [ 1192.701237][T17703] ___sys_sendmsg+0x106/0x1e0 [ 1192.701272][T17703] ? __pfx____sys_sendmsg+0x10/0x10 [ 1192.701298][T17703] ? __lock_acquire+0x49f/0x1a40 [ 1192.701324][T17703] ? proc_fail_nth_write+0x191/0x220 [ 1192.701388][T17703] __sys_sendmsg+0x160/0x210 [ 1192.701412][T17703] ? __pfx___sys_sendmsg+0x10/0x10 [ 1192.701449][T17703] do_syscall_64+0x115/0x870 [ 1192.701477][T17703] ? clear_bhb_loop+0x40/0x90 [ 1192.701502][T17703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.701522][T17703] RIP: 0033:0x7f997239ce59 [ 1192.701540][T17703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.701559][T17703] RSP: 002b:00007f99732de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1192.701579][T17703] RAX: ffffffffffffffda RBX: 00007f9972615fa0 RCX: 00007f997239ce59 [ 1192.701593][T17703] RDX: 0000000004008000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1192.701607][T17703] RBP: 00007f99732de090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.701619][T17703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.701631][T17703] R13: 00007f9972616038 R14: 00007f9972615fa0 R15: 00007ffff5779588 [ 1192.701660][T17703] [ 1192.912076][T11132] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1192.933552][T17710] netlink: 'syz.5.2893': attribute type 1 has an invalid length. [ 1193.174436][T11132] usb 2-1: USB disconnect, device number 127 [ 1193.199111][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1193.253939][T12920] usb 1-1: USB disconnect, device number 7 [ 1193.422946][ T9] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1193.452322][T17722] xt_HMARK: spi-set and port-set can't be combined [ 1193.523559][ T9] usb 6-1: USB disconnect, device number 97 [ 1194.591381][T17729] 9p: Bad value for 'wfdno' [ 1194.617713][T17729] fuse: Unknown parameter 'f [ 1194.617713][T17729] 0AeZγ}ZP齆᪩/j*-ŧ.fOhu.ژnrҚwVlZ!)I' [ 1195.208249][T17736] FAULT_INJECTION: forcing a failure. [ 1195.208249][T17736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.226894][T11132] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1195.268120][T17736] CPU: 0 UID: 0 PID: 17736 Comm: syz.1.2900 Tainted: G L syzkaller #0 PREEMPT(full) [ 1195.268153][T17736] Tainted: [L]=SOFTLOCKUP [ 1195.268160][T17736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1195.268172][T17736] Call Trace: [ 1195.268179][T17736] [ 1195.268188][T17736] dump_stack_lvl+0x100/0x190 [ 1195.268222][T17736] should_fail_ex.cold+0x5/0xa [ 1195.268252][T17736] _copy_from_user+0x2e/0xd0 [ 1195.268279][T17736] copy_msghdr_from_user+0x9f/0x4c0 [ 1195.268310][T17736] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1195.268352][T17736] ___sys_sendmsg+0x106/0x1e0 [ 1195.268382][T17736] ? __pfx____sys_sendmsg+0x10/0x10 [ 1195.268408][T17736] ? __lock_acquire+0x49f/0x1a40 [ 1195.268435][T17736] ? get_pid_task+0x106/0x250 [ 1195.268489][T17736] __sys_sendmsg+0x160/0x210 [ 1195.268512][T17736] ? __pfx___sys_sendmsg+0x10/0x10 [ 1195.268549][T17736] do_syscall_64+0x115/0x870 [ 1195.268578][T17736] ? clear_bhb_loop+0x40/0x90 [ 1195.268604][T17736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.268626][T17736] RIP: 0033:0x7f997239ce59 [ 1195.268650][T17736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.268669][T17736] RSP: 002b:00007f99732de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.268689][T17736] RAX: ffffffffffffffda RBX: 00007f9972615fa0 RCX: 00007f997239ce59 [ 1195.268703][T17736] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1195.268716][T17736] RBP: 00007f99732de090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.268729][T17736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.268741][T17736] R13: 00007f9972616038 R14: 00007f9972615fa0 R15: 00007ffff5779588 [ 1195.268770][T17736] [ 1195.724465][T11132] usb 1-1: Using ep0 maxpacket: 8 [ 1195.732474][T11132] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1195.757120][T11132] usb 1-1: config 6 has an invalid interface number: 54 but max is 0 [ 1195.771859][T11132] usb 1-1: config 6 has no interface number 0 [ 1195.794532][T11132] usb 1-1: config 6 interface 54 has no altsetting 0 [ 1195.815984][T11132] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=5a.74 [ 1195.856459][T11132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.895084][T11132] usb 1-1: Product: syz [ 1195.907519][T11132] usb 1-1: Manufacturer: syz [ 1195.926033][T11132] usb 1-1: SerialNumber: syz [ 1196.501832][T17751] tmpfs: Unknown parameter 'mpo' [ 1196.921313][ T29] audit: type=1326 audit(1782755380.678:15835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1196.995660][ T29] audit: type=1326 audit(1782755380.678:15836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1197.082454][ T29] audit: type=1326 audit(1782755380.678:15837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1197.222151][ T29] audit: type=1326 audit(1782755380.678:15838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1197.302707][ T29] audit: type=1326 audit(1782755380.678:15839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1197.368922][ T29] audit: type=1326 audit(1782755380.678:15840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1197.411768][T17756] xt_HMARK: spi-set and port-set can't be combined [ 1197.433303][ T29] audit: type=1326 audit(1782755380.718:15841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1197.596378][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1197.969632][ T29] audit: type=1326 audit(1782755380.738:15842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1198.064439][ T29] audit: type=1326 audit(1782755380.738:15843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1198.073761][T17760] fuse: Unknown parameter '0x0000000000000003' [ 1198.120732][ T29] audit: type=1326 audit(1782755380.738:15844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17728 comm="syz.0.2898" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07a59ce59 code=0x7fc00000 [ 1198.218838][T11132] comedi comedi5: Wrong number of endpoints [ 1198.231220][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1198.246718][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.257693][T11132] dt9812 1-1:6.54: driver 'dt9812' failed to auto-configure device. [ 1198.271285][ T9] usb 2-1: Product: syz [ 1198.281707][T11132] usb 1-1: USB disconnect, device number 8 [ 1198.291023][ T9] usb 2-1: Manufacturer: syz [ 1198.300409][ T9] usb 2-1: SerialNumber: syz [ 1198.342432][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1198.360348][T15414] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1198.364271][ T5797] libceph: connect (1)[c::]:6789 error -101 [ 1198.375341][ T5797] libceph: mon0 (1)[c::]:6789 connect error [ 1198.439416][T17767] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1198.636616][T12920] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1198.645134][ T5797] libceph: connect (1)[c::]:6789 error -101 [ 1198.651153][ T5797] libceph: mon0 (1)[c::]:6789 connect error [ 1198.778677][ T5797] usb 2-1: USB disconnect, device number 2 [ 1199.034735][T12920] usb 6-1: Using ep0 maxpacket: 16 [ 1199.048223][T12920] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1199.077840][T12920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.095042][T12920] usb 6-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1199.131567][T12920] usb 6-1: Manufacturer: Ь [ 1199.136082][T12920] usb 6-1: SerialNumber: syz [ 1199.235245][ T805] libceph: connect (1)[c::]:6789 error -101 [ 1199.241336][ T805] libceph: mon0 (1)[c::]:6789 connect error [ 1199.429984][T17762] ceph: No mds server is up or the cluster is laggy [ 1199.681746][T15414] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1199.689689][T15414] ath9k_htc: Failed to initialize the device [ 1199.722694][ T5797] usb 2-1: ath9k_htc: USB layer deinitialized [ 1200.949728][T12920] usb 6-1: USB disconnect, device number 98 [ 1201.164736][ T5797] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1201.382488][ T5797] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1201.459187][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.467216][ T5797] usb 2-1: Product: syz [ 1201.471430][ T5797] usb 2-1: Manufacturer: syz [ 1201.476036][ T5797] usb 2-1: SerialNumber: syz [ 1201.846680][ T5797] usb 2-1: config 0 descriptor?? [ 1201.877451][T17816] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1203.454887][ T5739] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1203.679129][ T5739] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1203.705818][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.737702][ T5739] usb 6-1: Product: syz [ 1203.751929][ T5739] usb 6-1: Manufacturer: syz [ 1203.765022][ T5739] usb 6-1: SerialNumber: syz [ 1203.792788][ T5739] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1203.809710][T15414] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1203.936851][T17842] vti0: entered promiscuous mode [ 1204.023705][T12920] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1204.216439][T12920] usb 1-1: config 10 has an invalid interface number: 62 but max is 0 [ 1204.233922][T12920] usb 1-1: config 10 has 2 interfaces, different from the descriptor's value: 1 [ 1204.247186][T11132] usb 6-1: USB disconnect, device number 99 [ 1204.255921][T12920] usb 1-1: config 10 has no interface number 1 [ 1204.255975][T12920] usb 1-1: too many endpoints for config 10 interface 0 altsetting 163: 251, using maximum allowed: 30 [ 1204.256015][T12920] usb 1-1: config 10 interface 0 altsetting 163 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 1204.256046][T12920] usb 1-1: config 10 interface 62 has no altsetting 0 [ 1204.256067][T12920] usb 1-1: config 10 interface 0 has no altsetting 0 [ 1204.723810][T12920] usb 1-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=75.d0 [ 1204.829018][T12920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.856889][T12920] usb 1-1: Product: syz [ 1204.936915][T15414] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1204.950001][T15414] ath9k_htc: Failed to initialize the device [ 1204.966735][T11132] usb 6-1: ath9k_htc: USB layer deinitialized [ 1204.999556][T12920] usb 1-1: Manufacturer: syz [ 1205.054321][T12920] usb 1-1: SerialNumber: syz [ 1205.200158][T15414] usb 2-1: USB disconnect, device number 3 [ 1205.862272][T12920] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 1205.898535][T12920] pwc: Failed to set LED on/off time (-71) [ 1205.922001][T12920] pwc: send_video_command error -71 [ 1205.944425][T12920] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1206.120584][T12920] Philips webcam 1-1:10.0: probe with driver Philips webcam failed with error -71 [ 1206.222854][T12920] usb 1-1: USB disconnect, device number 9 [ 1206.274754][T15414] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1206.296615][T17855] xt_HMARK: spi-set and port-set can't be combined [ 1206.567578][T15414] usb 2-1: Using ep0 maxpacket: 16 [ 1206.758098][T15414] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 1206.785417][T15414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.818523][T15414] usb 2-1: Product: 伀閿꺂⸍삳⫗뵶畎᭑듋暯ࡳ뺍࿸؀芔릑꽃㫄즘咧治茿熚臨졆㿥╅ஃ峣ꎛ඲環㑇˄⳧曘릜Ⴉᚼ쭡Ὦ릙捍邅ꢂ쟼掝ʠ뤵㲒茲︀骈븡贈鏺 [ 1206.880033][T15414] usb 2-1: Manufacturer: Ь [ 1206.901758][T15414] usb 2-1: SerialNumber: syz [ 1208.486071][T15414] usb 2-1: USB disconnect, device number 4 [ 1210.510523][T17886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17886 comm=syz.4.2937 [ 1212.004068][T12920] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1212.372691][T17903] xt_HMARK: spi-set and port-set can't be combined [ 1212.730556][T12920] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1212.732758][T17905] binder: 17904:17905 ioctl c0306201 0 returned -14 [ 1212.907933][T12920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.908757][ T2363] pvrusb2: request_firmware fatal error with code=-110 [ 1212.917339][T12920] usb 1-1: Product: syz [ 1212.930844][T12920] usb 1-1: Manufacturer: syz [ 1212.954557][T17907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2941'. [ 1212.964924][T12920] usb 1-1: SerialNumber: syz [ 1212.991102][ T2363] pvrusb2: Failure uploading firmware1 [ 1213.008072][T12920] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1213.022819][ T2363] pvrusb2: Device initialization was not successful. [ 1213.065118][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1213.070144][ T5797] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1213.132018][T17909] xt_HMARK: spi-set and port-set can't be combined [ 1213.143021][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1213.186551][T16157] pvrusb2: Device being rendered inoperable [ 1214.125464][ T5797] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1214.160989][ T5797] ath9k_htc: Failed to initialize the device [ 1214.714145][ T5797] usb 1-1: ath9k_htc: USB layer deinitialized [ 1215.049127][T17922] xt_HMARK: spi-set and port-set can't be combined [ 1216.064564][ T5739] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1216.957264][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1217.144528][ T5739] usb 2-1: device descriptor read/64, error -32 [ 1217.185455][T15414] usb 1-1: USB disconnect, device number 10 [ 1217.454485][ T5739] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1217.763838][T17940] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 1217.803716][T17940] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2948'. [ 1218.194418][ T5739] usb 2-1: Using ep0 maxpacket: 16 [ 1218.300707][ T5739] usb 2-1: device descriptor read/all, error -71 [ 1218.331777][ T5739] usb usb2-port1: attempt power cycle [ 1218.347594][T17948] FAULT_INJECTION: forcing a failure. [ 1218.347594][T17948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1218.366410][T17948] CPU: 0 UID: 0 PID: 17948 Comm: syz.0.2950 Tainted: G L syzkaller #0 PREEMPT(full) [ 1218.366441][T17948] Tainted: [L]=SOFTLOCKUP [ 1218.366449][T17948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1218.366461][T17948] Call Trace: [ 1218.366468][T17948] [ 1218.366476][T17948] dump_stack_lvl+0x100/0x190 [ 1218.366510][T17948] should_fail_ex.cold+0x5/0xa [ 1218.366540][T17948] _copy_to_user+0x32/0xd0 [ 1218.366569][T17948] simple_read_from_buffer+0xcb/0x170 [ 1218.366595][T17948] proc_fail_nth_read+0x1af/0x230 [ 1218.366626][T17948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1218.366657][T17948] ? rw_verify_area+0xce/0x6d0 [ 1218.366683][T17948] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1218.366713][T17948] vfs_read+0x1e4/0xb40 [ 1218.366746][T17948] ? __pfx_vfs_read+0x10/0x10 [ 1218.366774][T17948] ? __fget_files+0x215/0x3d0 [ 1218.366800][T17948] ? __fget_files+0x21f/0x3d0 [ 1218.366828][T17948] ksys_read+0x12a/0x250 [ 1218.366856][T17948] ? __pfx_ksys_read+0x10/0x10 [ 1218.366892][T17948] do_syscall_64+0x115/0x870 [ 1218.366928][T17948] ? clear_bhb_loop+0x40/0x90 [ 1218.366953][T17948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.366974][T17948] RIP: 0033:0x7fd07a55d68e [ 1218.366992][T17948] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1218.367011][T17948] RSP: 002b:00007fd07b4abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1218.367032][T17948] RAX: ffffffffffffffda RBX: 00007fd07b4ac6c0 RCX: 00007fd07a55d68e [ 1218.367045][T17948] RDX: 000000000000000f RSI: 00007fd07b4ac0a0 RDI: 0000000000000004 [ 1218.367057][T17948] RBP: 00007fd07b4ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.367072][T17948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.367085][T17948] R13: 00007fd07a816128 R14: 00007fd07a816090 R15: 00007fff7401a798 [ 1218.367113][T17948] [ 1218.959837][T17956] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1220.418478][T17971] fuse: Bad value for 'fd' [ 1220.439466][T17968] fuse: Bad value for 'fd' [ 1221.557926][T17987] netlink: 'syz.4.2959': attribute type 1 has an invalid length. [ 1222.000281][ T5797] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1222.213601][ T5797] usb 7-1: device descriptor read/64, error -71 [ 1222.494867][ T5797] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1223.340721][ T5797] usb 7-1: device descriptor read/64, error -71 [ 1223.520827][ T5797] usb usb7-port1: attempt power cycle [ 1223.704209][T12920] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1223.893152][ T5797] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1224.040812][ T5797] usb 7-1: device descriptor read/8, error -71 [ 1224.373706][T12920] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1224.426254][T12920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.443757][T12920] usb 5-1: Product: syz [ 1224.450346][T12920] usb 5-1: Manufacturer: syz [ 1224.457883][ T5797] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1224.476478][T12920] usb 5-1: SerialNumber: syz [ 1224.504545][T12920] usb 5-1: config 0 descriptor?? [ 1224.543745][ T5797] usb 7-1: device descriptor read/8, error -71 [ 1224.685888][ T5797] usb usb7-port1: unable to enumerate USB device [ 1224.737283][ T5739] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1225.030253][ T5739] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1225.052376][ T5739] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1225.069908][ T5739] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1225.091710][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.113028][ T5739] usb 2-1: config 0 descriptor?? [ 1225.135504][T18006] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1225.621243][T18025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2969'. [ 1225.769648][ T5739] hid-led 0003:1D34:000A.0005: unknown main item tag 0x1 [ 1225.795484][ T5739] hid-led 0003:1D34:000A.0005: ignoring exceeding usage max [ 1226.527855][T12920] usb 5-1: Firmware version (0.0) predates our first public release. [ 1226.540967][T12920] usb 5-1: Please update to version 0.2 or newer [ 1226.616322][ T5739] hid-led 0003:1D34:000A.0005: hidraw0: USB HID v0.c1 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 1226.953788][ T5739] hid-led 0003:1D34:000A.0005: Dream Cheeky Webmail Notifier initialized [ 1227.021991][ T5739] usb 2-1: USB disconnect, device number 8 [ 1227.862758][ T42] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1228.055017][T18054] netlink: 'syz.0.2974': attribute type 1 has an invalid length. [ 1228.158443][T18060] xt_HMARK: spi-set and port-set can't be combined [ 1228.218114][ T42] usb 7-1: device descriptor read/64, error -71 [ 1228.725684][ T42] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1228.903688][ T42] usb 7-1: device descriptor read/64, error -71 [ 1229.117063][ T42] usb usb7-port1: attempt power cycle [ 1230.923976][ T5739] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1231.205768][ T5739] usb 7-1: device descriptor read/64, error -71 [ 1231.364077][T18085] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1231.714477][ T5739] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1231.865119][ T5739] usb 7-1: device descriptor read/64, error -71 [ 1231.984903][ T5739] usb usb7-port1: attempt power cycle [ 1232.068782][T18091] fuse: Unknown parameter 'f [ 1232.068782][T18091] 0AeZγ}ZP齆᪩/j*-ŧ.fOhu.ژnrҚwVlZ!)I' [ 1232.377503][ T5739] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1232.514602][T15414] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1233.050895][T18096] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1233.119186][ T5739] usb 7-1: device descriptor read/8, error -71 [ 1233.305587][T15414] usb 2-1: Using ep0 maxpacket: 8 [ 1233.349488][T15414] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1233.483681][ T5739] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1233.542794][T15414] usb 2-1: config 6 has an invalid interface number: 54 but max is 0 [ 1233.552958][T15414] usb 2-1: config 6 has no interface number 0 [ 1233.567874][T15414] usb 2-1: config 6 interface 54 has no altsetting 0 [ 1233.585576][T15414] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=5a.74 [ 1233.627071][T15414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.658350][ T5739] usb 7-1: device descriptor read/8, error -71 [ 1233.685918][T15414] usb 2-1: Product: syz [ 1233.710392][T15414] usb 2-1: Manufacturer: syz [ 1233.727980][T15414] usb 2-1: SerialNumber: syz [ 1233.785365][ T5739] usb usb7-port1: unable to enumerate USB device [ 1234.044009][T18100] md: superblock version 12389 not known [ 1234.057442][ T29] kauditd_printk_skb: 2706 callbacks suppressed [ 1234.057471][ T29] audit: type=1326 audit(1782755417.808:18551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1234.071456][T18100] md: couldn't set array info. -22 [ 1234.093316][ T29] audit: type=1326 audit(1782755417.808:18552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1234.134938][ T29] audit: type=1326 audit(1782755417.808:18553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1234.161627][ T29] audit: type=1326 audit(1782755417.808:18554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1234.184592][ T5739] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1234.230760][T18104] xt_HMARK: spi-set and port-set can't be combined [ 1234.237619][ T29] audit: type=1326 audit(1782755417.808:18555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1234.321088][ T5739] usb 7-1: device descriptor read/64, error -71 [ 1234.757162][ T29] audit: type=1326 audit(1782755417.808:18556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1234.897047][ T29] audit: type=1326 audit(1782755417.808:18557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1234.934891][ T5739] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1234.935292][T12921] usb 5-1: USB disconnect, device number 39 [ 1235.064510][ T5739] usb 7-1: device descriptor read/64, error -71 [ 1235.075768][ T29] audit: type=1326 audit(1782755417.808:18558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1235.145280][ T29] audit: type=1326 audit(1782755417.808:18559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1235.179615][ T29] audit: type=1326 audit(1782755417.808:18560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.1.2983" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997239ce59 code=0x7fc00000 [ 1235.392183][ T5739] usb usb7-port1: attempt power cycle [ 1235.601263][T18115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2987'. [ 1235.616123][T18115] FAULT_INJECTION: forcing a failure. [ 1235.616123][T18115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.629237][T18115] CPU: 0 UID: 0 PID: 18115 Comm: syz.4.2987 Tainted: G L syzkaller #0 PREEMPT(full) [ 1235.629270][T18115] Tainted: [L]=SOFTLOCKUP [ 1235.629278][T18115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1235.629290][T18115] Call Trace: [ 1235.629298][T18115] [ 1235.629306][T18115] dump_stack_lvl+0x100/0x190 [ 1235.629342][T18115] should_fail_ex.cold+0x5/0xa [ 1235.629372][T18115] _copy_from_user+0x2e/0xd0 [ 1235.629400][T18115] copy_msghdr_from_user+0x9f/0x4c0 [ 1235.629431][T18115] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1235.629464][T18115] ? __lock_acquire+0x49f/0x1a40 [ 1235.629497][T18115] ___sys_sendmsg+0x106/0x1e0 [ 1235.629528][T18115] ? __pfx____sys_sendmsg+0x10/0x10 [ 1235.629554][T18115] ? __lock_acquire+0x49f/0x1a40 [ 1235.629579][T18115] ? finish_task_switch.isra.0+0x2c0/0x10c0 [ 1235.629643][T18115] __sys_sendmsg+0x160/0x210 [ 1235.629672][T18115] ? __pfx___sys_sendmsg+0x10/0x10 [ 1235.629702][T18115] ? trace_hardirqs_off+0x70/0x170 [ 1235.629737][T18115] do_syscall_64+0x115/0x870 [ 1235.629765][T18115] ? clear_bhb_loop+0x40/0x90 [ 1235.629792][T18115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.629814][T18115] RIP: 0033:0x7f87ef39ce59 [ 1235.629837][T18115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.629857][T18115] RSP: 002b:00007f87f023e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1235.629878][T18115] RAX: ffffffffffffffda RBX: 00007f87ef616180 RCX: 00007f87ef39ce59 [ 1235.629892][T18115] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000006 [ 1235.629906][T18115] RBP: 00007f87f023e090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.629919][T18115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.629932][T18115] R13: 00007f87ef616218 R14: 00007f87ef616180 R15: 00007fff1c2b1648 [ 1235.629961][T18115] [ 1235.861153][T18118] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1235.875754][ T5739] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1235.956878][ T5739] usb 7-1: device descriptor read/8, error -71 [ 1236.195104][T15414] comedi comedi5: Wrong number of endpoints [ 1236.201451][T15414] dt9812 2-1:6.54: driver 'dt9812' failed to auto-configure device. [ 1236.241308][T15414] usb 2-1: USB disconnect, device number 9 [ 1236.254820][ T5739] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1236.331048][ T5739] usb 7-1: device descriptor read/8, error -71 [ 1236.451155][T18129] netlink: 'syz.1.2991': attribute type 19 has an invalid length. [ 1236.564479][T16157] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1237.220991][ T5739] usb usb7-port1: unable to enumerate USB device [ 1237.594550][T16157] usb 6-1: device descriptor read/64, error -71 [ 1237.907667][T16157] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1238.117647][T16157] usb 6-1: device descriptor read/64, error -71 [ 1238.265595][T16157] usb usb6-port1: attempt power cycle [ 1238.633069][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.648203][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.880536][T16157] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1239.202965][T16157] usb 6-1: device descriptor read/8, error -71 [ 1239.278530][T18148] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1239.373528][T15414] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1239.635415][T15414] usb 7-1: device descriptor read/64, error -71 [ 1239.995381][T15414] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1240.187780][T15414] usb 7-1: device descriptor read/64, error -71 [ 1240.357944][T15414] usb usb7-port1: attempt power cycle [ 1241.246383][T15414] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1241.298981][T15414] usb 7-1: device descriptor read/8, error -71 [ 1241.452543][T18158] md: superblock version 12389 not known [ 1241.467189][T18158] md: couldn't set array info. -22 [ 1241.549919][T18161] fuse: Unknown parameter 'fd0x0000000000000003' [ 1241.584839][T15414] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1241.637416][T15414] usb 7-1: device descriptor read/8, error -71 [ 1241.785545][T15414] usb usb7-port1: unable to enumerate USB device [ 1241.789379][T18163] FAULT_INJECTION: forcing a failure. [ 1241.789379][T18163] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.829793][T18163] CPU: 1 UID: 0 PID: 18163 Comm: syz.0.2999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1241.829828][T18163] Tainted: [L]=SOFTLOCKUP [ 1241.829836][T18163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1241.829849][T18163] Call Trace: [ 1241.829857][T18163] [ 1241.829866][T18163] dump_stack_lvl+0x100/0x190 [ 1241.829898][T18163] should_fail_ex.cold+0x5/0xa [ 1241.829928][T18163] should_failslab+0xc2/0x120 [ 1241.829956][T18163] __kmalloc_noprof+0xfc/0x820 [ 1241.829986][T18163] ? rcu_is_watching+0x12/0xc0 [ 1241.830018][T18163] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1241.830055][T18163] tomoyo_realpath_from_path+0xb6/0x690 [ 1241.830093][T18163] tomoyo_path_number_perm+0x23c/0x580 [ 1241.830121][T18163] ? tomoyo_path_number_perm+0x22e/0x580 [ 1241.830149][T18163] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1241.830208][T18163] ? find_held_lock+0x2b/0x80 [ 1241.830227][T18163] ? __fget_files+0x215/0x3d0 [ 1241.830248][T18163] ? hook_file_ioctl_common+0x140/0x440 [ 1241.830269][T18163] ? __fget_files+0x215/0x3d0 [ 1241.830296][T18163] ? __fget_files+0x21f/0x3d0 [ 1241.830323][T18163] security_file_ioctl+0xd3/0x230 [ 1241.830354][T18163] __x64_sys_ioctl+0xb7/0x210 [ 1241.830385][T18163] do_syscall_64+0x115/0x870 [ 1241.830412][T18163] ? clear_bhb_loop+0x40/0x90 [ 1241.830436][T18163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.830456][T18163] RIP: 0033:0x7fd07a59ce59 [ 1241.830474][T18163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1241.830494][T18163] RSP: 002b:00007fd07b4cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1241.830514][T18163] RAX: ffffffffffffffda RBX: 00007fd07a815fa0 RCX: 00007fd07a59ce59 [ 1241.830528][T18163] RDX: 0000000000000000 RSI: 00000000c0185500 RDI: 0000000000000003 [ 1241.830541][T18163] RBP: 00007fd07b4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.830554][T18163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.830566][T18163] R13: 00007fd07a816038 R14: 00007fd07a815fa0 R15: 00007fff7401a798 [ 1241.830595][T18163] [ 1241.830697][T18163] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1245.872567][T18203] xt_HMARK: spi-set and port-set can't be combined [ 1248.310220][T18221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3014'. [ 1248.364144][T12921] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1249.504461][T15414] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1249.667984][T15414] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1250.316520][T15414] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.470244][T15414] usb 7-1: config 0 descriptor?? [ 1250.557210][T15414] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1250.624453][T12921] usb 5-1: device descriptor read/64, error -71 [ 1250.759212][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1250.759230][ T29] audit: type=1400 audit(1782755434.518:18619): avc: denied { create } for pid=18215 comm="syz.6.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1250.996631][ T29] audit: type=1400 audit(1782755434.548:18620): avc: denied { ioctl } for pid=18215 comm="syz.6.3013" path="socket:[74618]" dev="sockfs" ino=74618 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1251.246499][T15414] gspca_spca508: reg_read err -110 [ 1251.350398][T15414] gspca_spca508: reg_read err -32 [ 1251.542930][T15414] gspca_spca508: reg_read err -32 [ 1251.597308][T15414] gspca_spca508: reg_read err -32 [ 1251.628881][T15414] gspca_spca508: reg_read err -32 [ 1251.676801][T15414] gspca_spca508: reg write: error -32 [ 1251.703667][ T992] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1251.716829][T15414] spca508 7-1:0.0: probe with driver spca508 failed with error -32 [ 1252.044442][ T992] usb 6-1: Using ep0 maxpacket: 16 [ 1252.051294][ T992] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.065117][ T992] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1252.079345][ T992] usb 6-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 1252.458506][ T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.486655][ T992] usb 6-1: config 0 descriptor?? [ 1252.496637][T15414] usb 7-1: USB disconnect, device number 53 [ 1252.565902][ T992] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1252.937857][T18250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.017257][ T29] audit: type=1400 audit(1782755436.778:18621): avc: denied { mmap_zero } for pid=18252 comm="syz.0.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1253.020468][T18250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.298843][T16157] usb 6-1: USB disconnect, device number 104 [ 1254.313821][T12921] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1255.335064][T12921] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1255.346875][T12921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.359197][T12921] usb 5-1: Product: syz [ 1255.364167][T12921] usb 5-1: Manufacturer: syz [ 1255.369311][T12921] usb 5-1: SerialNumber: syz [ 1255.379136][T12921] usb 5-1: config 0 descriptor?? [ 1255.448639][T18270] xt_HMARK: spi-set and port-set can't be combined [ 1257.423952][ T992] usb 5-1: USB disconnect, device number 42 [ 1257.622798][T18293] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1258.013643][T12921] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1258.105561][T18296] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1258.167924][T12921] usb 2-1: device descriptor read/64, error -71 [ 1258.604136][T12921] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1259.643609][T12921] usb 2-1: device descriptor read/64, error -71 [ 1259.764392][T12921] usb usb2-port1: attempt power cycle [ 1260.303633][T12921] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1260.368940][T18313] netlink: 'syz.0.3035': attribute type 1 has an invalid length. [ 1260.414432][T12921] usb 2-1: device descriptor read/8, error -71 [ 1261.173817][T12921] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1261.240042][T12921] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1261.293621][T12921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.345299][T12921] usb 2-1: Product: syz [ 1261.351959][T12921] usb 2-1: Manufacturer: syz [ 1261.376666][T12921] usb 2-1: SerialNumber: syz [ 1261.409954][T12921] usb 2-1: config 0 descriptor?? [ 1261.767984][T18331] xt_HMARK: spi-set and port-set can't be combined [ 1262.614100][T18341] xt_HMARK: spi-set and port-set can't be combined [ 1262.644258][ T42] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1263.217644][T12921] usb 2-1: Firmware version (0.0) predates our first public release. [ 1263.260355][T12921] usb 2-1: Please update to version 0.2 or newer [ 1263.362682][T18345] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1263.811169][ T42] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1263.877958][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.887166][ T42] usb 7-1: Product: syz [ 1263.897488][ T42] usb 7-1: Manufacturer: syz [ 1263.902861][ T42] usb 7-1: SerialNumber: syz [ 1264.011387][ T42] usb 7-1: config 0 descriptor?? [ 1264.706409][T18355] FAULT_INJECTION: forcing a failure. [ 1264.706409][T18355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1264.736252][T18355] CPU: 0 UID: 0 PID: 18355 Comm: syz.5.3045 Tainted: G L syzkaller #0 PREEMPT(full) [ 1264.736285][T18355] Tainted: [L]=SOFTLOCKUP [ 1264.736293][T18355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1264.736304][T18355] Call Trace: [ 1264.736310][T18355] [ 1264.736318][T18355] dump_stack_lvl+0x100/0x190 [ 1264.736351][T18355] should_fail_ex.cold+0x5/0xa [ 1264.736387][T18355] _copy_from_user+0x2e/0xd0 [ 1264.736413][T18355] copy_msghdr_from_user+0x9f/0x4c0 [ 1264.736443][T18355] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1264.736481][T18355] ___sys_sendmsg+0x106/0x1e0 [ 1264.736510][T18355] ? __pfx____sys_sendmsg+0x10/0x10 [ 1264.736536][T18355] ? __lock_acquire+0x49f/0x1a40 [ 1264.736561][T18355] ? get_pid_task+0x106/0x250 [ 1264.736612][T18355] __sys_sendmsg+0x160/0x210 [ 1264.736634][T18355] ? __pfx___sys_sendmsg+0x10/0x10 [ 1264.736669][T18355] do_syscall_64+0x115/0x870 [ 1264.736697][T18355] ? clear_bhb_loop+0x40/0x90 [ 1264.736724][T18355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.736745][T18355] RIP: 0033:0x7feccf99ce59 [ 1264.736763][T18355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1264.736783][T18355] RSP: 002b:00007fecd08c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1264.736804][T18355] RAX: ffffffffffffffda RBX: 00007feccfc15fa0 RCX: 00007feccf99ce59 [ 1264.736819][T18355] RDX: 0000000000004000 RSI: 0000200000000540 RDI: 0000000000000004 [ 1264.736833][T18355] RBP: 00007fecd08c9090 R08: 0000000000000000 R09: 0000000000000000 [ 1264.736846][T18355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1264.736859][T18355] R13: 00007feccfc16038 R14: 00007feccfc15fa0 R15: 00007ffefe8ab648 [ 1264.736888][T18355] [ 1266.511089][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3047'. [ 1267.200025][T18378] xt_HMARK: spi-set and port-set can't be combined [ 1267.961332][ T992] usb 7-1: USB disconnect, device number 54 [ 1268.134714][T18384] xt_HMARK: spi-set and port-set can't be combined [ 1268.164138][T18385] xt_HMARK: spi-set and port-set can't be combined [ 1269.434451][ T992] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1269.728913][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 1269.980788][ T992] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.031350][ T992] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1270.246823][ T992] usb 5-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 1270.265618][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.302389][ T992] usb 5-1: config 0 descriptor?? [ 1270.697615][ T992] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1271.432946][T18417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.477117][T18417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.502354][ T29] audit: type=1326 audit(1782755455.258:18622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18403 comm="syz.1.3056" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f997239ce59 code=0x0 [ 1271.595907][T14834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1271.612216][T14834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1271.623517][T14834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1271.657389][T14834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1271.664923][T14834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1271.822477][T12921] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1272.042459][T18430] tmpfs: Unknown parameter 'mpo' [ 1272.488797][ T42] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1272.607745][T12921] usb 6-1: Using ep0 maxpacket: 32 [ 1273.095687][T16157] usb 5-1: USB disconnect, device number 43 [ 1273.154800][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 1273.246091][T12921] usb 6-1: config 0 has no interfaces? [ 1275.389064][T18421] wlan0 speed is unknown, defaulting to 1000 [ 1275.422610][T14834] Bluetooth: hci2: command tx timeout [ 1380.433499][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1380.440471][ C0] rcu: 1-...!: (1 GPs behind) idle=b6c4/1/0x4000000000000002 softirq=106014/106015 fqs=41 [ 1380.451603][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18421/1:b..l [ 1380.459599][ C0] rcu: (detected by 0, t=10502 jiffies, g=115293, q=250 ncpus=2) [ 1380.467398][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1380.467433][ C1] NMI backtrace for cpu 1 [ 1380.467450][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.467476][ C1] Tainted: [L]=SOFTLOCKUP [ 1380.467483][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1380.467495][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 1380.467524][ C1] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 1380.467542][ C1] RSP: 0018:ffffc90000a08e60 EFLAGS: 00000046 [ 1380.467556][ C1] RAX: 0000000000000001 RBX: ffff8880b8528540 RCX: 0000000000000001 [ 1380.467568][ C1] RDX: 0000000000000046 RSI: 0000000000000001 RDI: 0000000000000000 [ 1380.467579][ C1] RBP: ffff888035a9b300 R08: 0000000000000005 R09: 0000000000000000 [ 1380.467591][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1380.467602][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8528590 [ 1380.467614][ C1] FS: 0000000000000000(0000) GS:ffff8881241e0000(0000) knlGS:0000000000000000 [ 1380.467631][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1380.467643][ C1] CR2: 00007f87ef3ea540 CR3: 0000000058fa0000 CR4: 00000000003526f0 [ 1380.467655][ C1] Call Trace: [ 1380.467662][ C1] [ 1380.467669][ C1] enqueue_hrtimer+0x25b/0x2f0 [ 1380.467700][ C1] __hrtimer_run_queues+0x6ed/0x9c0 [ 1380.467728][ C1] ? rcu_is_watching+0x12/0xc0 [ 1380.467757][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1380.467781][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1380.467811][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1380.467837][ C1] [ 1380.467843][ C1] [ 1380.467850][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1380.467870][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 1380.467896][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 e9 47 04 00 00 49 8d 7f 48 e8 b0 a4 ca 09 e8 4b ad 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 1380.467914][ C1] RSP: 0018:ffffc90000197c30 EFLAGS: 00000206 [ 1380.467928][ C1] RAX: 000000000642df55 RBX: ffff88801ea92540 RCX: 0000000000000000 [ 1380.467940][ C1] RDX: 0000000000000000 RSI: ffffffff8e15d8c3 RDI: ffff88801ea93c38 [ 1380.467957][ C1] RBP: ffffc90000197c88 R08: 0000000000000001 R09: 0000000000000000 [ 1380.467969][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888057f50000 [ 1380.467980][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880b853b4c0 [ 1380.468004][ C1] __schedule+0x1264/0x6730 [ 1380.468033][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1380.468055][ C1] ? __pfx___schedule+0x10/0x10 [ 1380.468078][ C1] ? rcu_is_watching+0x12/0xc0 [ 1380.468103][ C1] ? tick_nohz_idle_exit+0x1a1/0x3f0 [ 1380.468128][ C1] schedule_idle+0x54/0x80 [ 1380.468150][ C1] do_idle+0x35e/0x5b0 [ 1380.468175][ C1] ? __pfx_do_idle+0x10/0x10 [ 1380.468203][ C1] cpu_startup_entry+0x4f/0x60 [ 1380.468228][ C1] start_secondary+0x21d/0x2d0 [ 1380.468251][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1380.468276][ C1] common_startup_64+0x13e/0x158 [ 1380.468301][ C1] [ 1380.468425][ C0] task:syz-executor state:R running task stack:27312 pid:18421 tgid:18421 ppid:18412 task_flags:0x400140 flags:0x00080000 [ 1380.793270][ C0] Call Trace: [ 1380.796537][ C0] [ 1380.799464][ C0] __schedule+0x125c/0x6730 [ 1380.803969][ C0] ? clockevents_program_event+0x23e/0x820 [ 1380.809778][ C0] ? clockevents_program_event+0x23e/0x820 [ 1380.815603][ C0] ? __pfx___schedule+0x10/0x10 [ 1380.820454][ C0] ? mark_held_locks+0x40/0x70 [ 1380.825217][ C0] preempt_schedule_irq+0x50/0x90 [ 1380.830241][ C0] irqentry_exit+0x205/0xa00 [ 1380.834834][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1380.840808][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 1380.846004][ C0] Code: 05 bb ef 4e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 06 a2 16 0f 0f 82 ac 02 00 00 8b 35 ce d5 16 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d ef 4e 12 0f 85 ec 02 00 00 48 83 c4 [ 1380.865602][ C0] RSP: 0018:ffffc90005386fd8 EFLAGS: 00000206 [ 1380.871662][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1380.879622][ C0] RDX: 0000000000000000 RSI: ffffffff8e137c0e RDI: ffffffff8c3e9b80 [ 1380.887581][ C0] RBP: ffffffff8e9e60c0 R08: 00000000f0f05a23 R09: 0000000000000007 [ 1380.895539][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1380.903499][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.911473][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1380.916666][ C0] ? unwind_next_frame+0x3be/0x2090 [ 1380.921862][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1380.928011][ C0] unwind_next_frame+0xd1/0x2090 [ 1380.932940][ C0] ? unwind_next_frame+0xbd/0x2090 [ 1380.938047][ C0] ? ksys_unshare+0x438/0xab0 [ 1380.942730][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1380.948876][ C0] arch_stack_walk+0x94/0xf0 [ 1380.953470][ C0] ? ksys_unshare+0x438/0xab0 [ 1380.958151][ C0] stack_trace_save+0x8e/0xc0 [ 1380.962820][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1380.968189][ C0] ? stack_trace_save+0x8e/0xc0 [ 1380.973033][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1380.978407][ C0] kasan_save_stack+0x30/0x50 [ 1380.983082][ C0] ? kasan_save_stack+0x30/0x50 [ 1380.987927][ C0] ? kasan_save_track+0x14/0x30 [ 1380.992772][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1380.997527][ C0] ? __kmalloc_node_track_caller_noprof+0x331/0x830 [ 1381.004111][ C0] ? kstrdup+0x51/0xe0 [ 1381.008170][ C0] ? kstrdup_const+0x63/0x80 [ 1381.012754][ C0] ? __kernfs_new_node+0x9b/0xa10 [ 1381.017770][ C0] ? kernfs_new_node+0x117/0x150 [ 1381.022699][ C0] ? __kernfs_create_file+0x53/0x350 [ 1381.027980][ C0] ? sysfs_add_file_mode_ns+0x207/0x3c0 [ 1381.033525][ C0] ? internal_create_group+0x593/0xfb0 [ 1381.038975][ C0] ? internal_create_groups+0x9d/0x150 [ 1381.044422][ C0] ? setup_port+0x409/0x16e0 [ 1381.049006][ C0] ? ib_setup_port_attrs+0x201/0x600 [ 1381.054285][ C0] ? add_one_compat_dev+0x5b3/0x820 [ 1381.059479][ C0] ? rdma_dev_init_net+0x30a/0x590 [ 1381.064586][ C0] ? ops_init+0x1e2/0x5f0 [ 1381.068907][ C0] ? setup_net+0x118/0x3a0 [ 1381.073316][ C0] ? copy_net_ns+0x46f/0x7c0 [ 1381.077898][ C0] ? create_new_namespaces+0x3ea/0xac0 [ 1381.083354][ C0] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 1381.089162][ C0] ? ksys_unshare+0x438/0xab0 [ 1381.093869][ C0] kasan_save_track+0x14/0x30 [ 1381.098541][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1381.103128][ C0] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 1381.109545][ C0] ? kstrdup_const+0x63/0x80 [ 1381.114134][ C0] kstrdup+0x51/0xe0 [ 1381.118024][ C0] kstrdup_const+0x63/0x80 [ 1381.122432][ C0] __kernfs_new_node+0x9b/0xa10 [ 1381.127288][ C0] ? __pfx___kernfs_new_node+0x10/0x10 [ 1381.132755][ C0] ? find_held_lock+0x2b/0x80 [ 1381.137422][ C0] ? kernfs_root+0xee/0x2a0 [ 1381.141917][ C0] ? kernfs_root+0xee/0x2a0 [ 1381.146418][ C0] kernfs_new_node+0x117/0x150 [ 1381.151183][ C0] __kernfs_create_file+0x53/0x350 [ 1381.156296][ C0] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1381.161679][ C0] internal_create_group+0x593/0xfb0 [ 1381.166965][ C0] ? __pfx_internal_create_group+0x10/0x10 [ 1381.172761][ C0] ? __pfx_kobject_add+0x10/0x10 [ 1381.177706][ C0] internal_create_groups+0x9d/0x150 [ 1381.182992][ C0] setup_port+0x409/0x16e0 [ 1381.187417][ C0] ? __pfx_setup_port+0x10/0x10 [ 1381.192261][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1381.197466][ C0] ? rxe_get_link_layer+0x64/0xc0 [ 1381.202484][ C0] ? __pfx_rxe_get_link_layer+0x10/0x10 [ 1381.208018][ C0] ? rdma_port_get_link_layer+0x57/0xe0 [ 1381.213566][ C0] ib_setup_port_attrs+0x201/0x600 [ 1381.218675][ C0] ? kobject_put+0xb9/0x640 [ 1381.223174][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 1381.228809][ C0] ? __init_waitqueue_head+0xca/0x150 [ 1381.234185][ C0] add_one_compat_dev+0x5b3/0x820 [ 1381.239215][ C0] rdma_dev_init_net+0x30a/0x590 [ 1381.244152][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1381.249615][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1381.255073][ C0] ops_init+0x1e2/0x5f0 [ 1381.259225][ C0] setup_net+0x118/0x3a0 [ 1381.263462][ C0] ? __pfx_setup_net+0x10/0x10 [ 1381.268218][ C0] ? mutex_init_lockdep+0xf1/0x120 [ 1381.273333][ C0] copy_net_ns+0x46f/0x7c0 [ 1381.277750][ C0] create_new_namespaces+0x3ea/0xac0 [ 1381.283042][ C0] unshare_nsproxy_namespaces+0xf2/0x220 [ 1381.288678][ C0] ksys_unshare+0x438/0xab0 [ 1381.293183][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 1381.298209][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 1381.303499][ C0] __x64_sys_unshare+0x31/0x40 [ 1381.308262][ C0] do_syscall_64+0x115/0x870 [ 1381.312851][ C0] ? clear_bhb_loop+0x40/0x90 [ 1381.317524][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.323410][ C0] RIP: 0033:0x7f98b859e127 [ 1381.327821][ C0] RSP: 002b:00007fff474c4f38 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1381.336225][ C0] RAX: ffffffffffffffda RBX: 00007f98b8815f40 RCX: 00007f98b859e127 [ 1381.344187][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1381.352147][ C0] RBP: 00007f98b88167b8 R08: 0000000000000000 R09: 0000000000000000 [ 1381.360107][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1381.368067][ C0] R13: 0000000000000003 R14: 00007fff474c5178 R15: 0000000000000000 [ 1381.376049][ C0] [ 1381.379068][ C0] rcu: rcu_preempt kthread starved for 10420 jiffies! g115293 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1381.390333][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1381.400286][ C0] rcu: RCU grace-period kthread stack dump: [ 1381.406155][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1381.419648][ C0] Call Trace: [ 1381.422918][ C0] [ 1381.425840][ C0] __schedule+0x125c/0x6730 [ 1381.430365][ C0] ? __pfx___schedule+0x10/0x10 [ 1381.435212][ C0] ? find_held_lock+0x2b/0x80 [ 1381.439879][ C0] ? schedule+0x225/0x2c0 [ 1381.444210][ C0] schedule+0xdd/0x2c0 [ 1381.448277][ C0] schedule_timeout+0x127/0x280 [ 1381.453121][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1381.458488][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1381.463768][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1381.469571][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1381.475030][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1381.479793][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1381.485077][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1381.490011][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1381.495198][ C0] ? rcu_is_watching+0x12/0xc0 [ 1381.499963][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1381.505768][ C0] rcu_gp_kthread+0x179/0x230 [ 1381.510437][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1381.515631][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1381.521434][ C0] ? __kthread_parkme+0x18c/0x230 [ 1381.526463][ C0] ? kthread+0x13a/0x450 [ 1381.530693][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1381.535882][ C0] kthread+0x370/0x450 [ 1381.539939][ C0] ? __pfx_kthread+0x10/0x10 [ 1381.544520][ C0] ret_from_fork+0x72b/0xd50 [ 1381.549111][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1381.554225][ C0] ? __switch_to+0x800/0x10f0 [ 1381.558893][ C0] ? __pfx_kthread+0x10/0x10 [ 1381.563474][ C0] ret_from_fork_asm+0x1a/0x30 [ 1381.568240][ C0] [ 1381.571244][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1381.577552][ C0] CPU: 0 UID: 0 PID: 5629 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 1381.587955][ C0] Tainted: [L]=SOFTLOCKUP [ 1381.592264][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1381.602303][ C0] RIP: 0010:smp_call_function_many_cond+0x593/0x16c0 [ 1381.608981][ C0] Code: 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b9 95 0c 00 f3 90 41 0f b6 45 00 41 38 c4 7c 08 <84> c0 0f 85 2c 0f 00 00 8b 45 08 31 ff 83 e0 01 41 89 c6 89 c6 e8 [ 1381.628579][ C0] RSP: 0018:ffffc9000306f5f0 EFLAGS: 00000206 [ 1381.634637][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fcea8d [ 1381.642594][ C0] RDX: ffff88807cacca80 RSI: ffffffff81fcea67 RDI: ffff88807cacca80 [ 1381.650554][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 1381.658511][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 1381.666468][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 1381.674429][ C0] FS: 00007f28729c6880(0000) GS:ffff8881240e0000(0000) knlGS:0000000000000000 [ 1381.683349][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1381.689923][ C0] CR2: 00005559f0ca5658 CR3: 000000005a515000 CR4: 00000000003526f0 [ 1381.697883][ C0] Call Trace: [ 1381.701150][ C0] [ 1381.704071][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1381.709279][ C0] ? free_pgd_range+0x2a0/0x10d0 [ 1381.714217][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1381.720551][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 1381.725749][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1381.730861][ C0] flush_tlb_mm_range+0x45f/0x16f0 [ 1381.735973][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 1381.741083][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1381.746634][ C0] tlb_finish_mmu+0x3fe/0x810 [ 1381.751314][ C0] unmap_region+0x2d9/0x3b0 [ 1381.755823][ C0] ? __pfx_unmap_region+0x10/0x10 [ 1381.760864][ C0] ? mas_store_gfp+0xfb6/0x1350 [ 1381.765715][ C0] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 1381.771261][ C0] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1381.777329][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1381.782084][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 1381.786844][ C0] do_vmi_align_munmap+0x44f/0x5f0 [ 1381.791954][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1381.797621][ C0] do_vmi_munmap+0x1f8/0x3e0 [ 1381.802209][ C0] __vm_munmap+0x196/0x390 [ 1381.806620][ C0] ? __pfx___vm_munmap+0x10/0x10 [ 1381.811569][ C0] __x64_sys_munmap+0x59/0x80 [ 1381.816244][ C0] do_syscall_64+0x115/0x870 [ 1381.820834][ C0] ? clear_bhb_loop+0x40/0x90 [ 1381.825508][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.831395][ C0] RIP: 0033:0x7f287231e097 [ 1381.835801][ C0] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 1381.855396][ C0] RSP: 002b:00007ffe1f549838 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1381.863798][ C0] RAX: ffffffffffffffda RBX: 00005559f0a4ef90 RCX: 00007f287231e097 [ 1381.871758][ C0] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007f2871600000 [ 1381.879719][ C0] RBP: 00005559f0a4c2c0 R08: 00005559f0c8c660 R09: 0000000000000006 [ 1381.887681][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00005559ebb4a588 [ 1381.895638][ C0] R13: 00007ffe1f5498c0 R14: 0000000000000000 R15: 0000000000000000 [ 1381.903612][ C0]